This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
A secure government organisation is seeking an Information Security & Assurance Advisor to join its Information Assurance function, supporting information security, governance, risk and compliance activities across a complex operational environment. This is an opportunity to play a key role in protecting sensitive information, managing information security risks and ensuring compliance with regulatory, legislative and organisational requirements. Working across the organisation, you will provide specialist advice and assurance services that support the secure, lawful and effective use of information.
Job Responsibility
Identify, assess and manage information security risks across the organisation
Support compliance with national information security and assurance requirements
Provide expert advice on information security, governance and data protection matters
Develop, review and maintain information security policies, procedures and standards
Undertake information security audits, assurance reviews and compliance assessments
Support data protection compliance activities and privacy impact assessments
Investigate and manage information security incidents, ensuring lessons learned are captured and controls strengthened
Produce risk, assurance and compliance reporting for senior stakeholders
Assess supplier and third-party security arrangements and associated risks
Deliver security awareness guidance and support across the organisation
Contribute to the continual improvement of information assurance and security governance frameworks
Requirements
Have the unrestricted right to work in the UK
Have continuously resided in the UK for the last five years
Be eligible to obtain enhanced security clearance
Hold a full UK driving licence
Be willing to travel regularly across the region as required
Applicants should be able to demonstrate experience in several of the following areas: Information Security, Information Assurance or Information Risk Management
Security governance, risk and compliance activities
Information security audits and assurance reviews
Security incident management and investigation
Data protection and privacy compliance
Developing and implementing security policies and procedures
Stakeholder engagement across technical and non-technical teams
Working within regulated or compliance-driven environments
Information security standards and frameworks such as ISO27001 and NIST
UK GDPR and Data Protection legislation
Information risk management principles
Security governance and assurance practices
Confidentiality, integrity and availability principles
Nice to have
Government, policing, criminal justice or wider public sector experience
Supplier assurance and third-party risk management
Accreditation, compliance or audit programmes
Experience operating within secure or highly regulated environments