16404 - Security Risk and Assurance Associate

The role of the Security Risk and Assurance Associate is to support the central MoJ Information Security Team in carrying out cyber security assurance, highlighting non-compliance with required standards and bringing awareness to the cyber security risks arising from control gaps. The role also involves supporting others with good risk management practices to enable them to manage residual risks well, identify trends resulting from risk and assurance activities and use these to propose improvements to processes, policies and guidance, and support senior team members to resolve tactical requests to the team.

Requirements

• Support senior stakeholders with the implementation and delivery of security assurance processes
• Support the communication of assessment and assurance outcomes to stakeholders in ways that support effective security, risk management and decision-making
• Work with Justice Digital and Information Assurance colleagues to support the gathering of evidence of the performance of technical services and organisational processes against security baselines, controls and requirements
• Analyse relevant data to provide an informed opinion on Cyber Security risks and the adequacy of controls in place
• Understand relevant regulation, policy and standards to be able to support the provision of proportional, practical advice that is tailored to the local environment
• Contribute to the development and enablement of security policy and security culture
• Support risk-related work and enable compliance and governance
• Support and take part in building the network of security partners across government and national technical authorities, and within industry
• Contribute to submissions and reports for senior MoJ officials and support efforts needed to respond to requests and advisories received from government partners

Benefits

• Annual Leave
• Pension
• Training
• Networks
• Support
• Civil Service