Grade 7 Security Assurance & Response Manager

Location

East Kilbride, London

About The Job

Job summary

Rosa is a shared IT platform that enables communication and collaborative working at SECRET across the majority of UK and devolved government departments and sensitive industry partners.

The Rosa Service Organisation provides fixed and mobile SECRET products and services in 166 countries across the globe, allowing our users to create and share information securely.

We use some of the most innovative and exciting information security technology in the world to protect our national interests whilst enabling our users to work in far more efficient ways than any previous solutions have allowed.

Respect, collaboration, and trust are at the core of our values. We believe in our mission to protect the most sensitive information in the UK. We can only do this by being an inclusive, diverse, and flexible organisation.

You will work within the Design & Technology department alongside User Researchers and Product Managers to design the service wraps for our ground-breaking products.

Job Description

Joining the Rosa Security Group as Security Assurance & Response Manager, you will play a pivotal role in helping the organisation understand its security resilience status and maintain a high level of readiness to deal with potential security events. You will be responsible for drawing information from a variety of sources and working collaboratively with colleagues from the Rosa Security Group, wider organisation, OGDs and Suppliers. You will also support the CISO by leading on periodic investigation work, in response to specific situations with the potential to undermine the security posture of the organisation. Your role sits within the Security Assurance Team, where you will have oversight of the Policy Team and, as part of the Rosa Security Group, you will get exposure to a wide range of security knowledge and expertise that will be helpful in delivering your work. Equally your own knowledge and expertise will be sought after by colleagues working on other security priorities. This is a fantastic opportunity to be a part of a growing team in a modern and flexible working environment. This is a valued and exciting role for an experienced, enthusiastic, and driven individual looking for an opportunity to have a material impact on a security focused organisation at the heart of government.

Person specification

We will use the essential and desirable skills and experience to help evaluate technical competence.

You must have:

Responsibilities

• Develop trusted relationships with relevant contacts across government (e.g. NCSC) to ensure that exercises can successfully involve relevant parties outside of Rosa.
• Measure and report on resilience/response capabilities with a view to driving continuous improvement across the organisation.
• Work with Risk Management colleagues to ensure that resilience/response related risks remain complete and accurate.
• Lead and report on ad-hoc security investigations, including preparation of briefing documents for senior colleagues.
• Contribute to continuous improvement and strategic planning, working collaboratively with Security Group colleagues.
• Provide leadership to the Security Assurance and Policy Teams, ensuring the links between Compliance, Assurance and Risk are consistent throughout the teams.

Essential Skills

• Experience of successful collaboration with a broad range of stakeholders in a business context
• Experience of conducting investigative work, with evidence of pursuing enquiries at pace and with an ability to quickly assimilate complex information and identify the critical facts
• Experience of producing high quality, accurate and precise written work at pace.
• Experience of information security risk management.

Desirable Skills

• Working exposure to NIST 800-53
• Working understanding of NCSC CAF and Gov Assure
• Leading groups of people to deliver successful business outcomes
• Monitoring/measuring cyber security risks
• Demonstrable experience of managing complexity in a working context
• Experience of cyber security response planning, including design of scenario based exercises

Behaviours

We'll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Making Effective Decisions
• Communicating and Influencing

Technical Skills

We'll assess you against these technical skills during the selection process:

• Business Continuity Management
• Security Assurance
• Risk Understanding and Mitigation
• Incident Management, Incident Investigation and Response

Benefits

Alongside your salary of 53, 000, Foreign, Commonwealth & Development Office contributes 13, 937 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an average employer contribution of 27%
• We understand that people are at the heart of our success. We promote and encourage all our staff to follow continued professional development, offering our staff access to a range of learning and development opportunities.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

Step 1.

Submit a CV outlining your employment history detailing your responsibilities, skills, accomplishments, plus your qualifications and relevant training. Please ensure you have provided reasons for any gaps within the last two years.

Step 2.

A Suitability Statement using no more than 1000 words outlining what you can bring to the role with outlining your experience against the essential criteria above.

Step 3.

Additional Eligibility Questions. Answers to these questions will determine if you are eligible to apply.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window) . See our vetting charter (opens in a new window) .

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality Requirements

Open to UK nationals only.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) .

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Jack Coyle
• Email : rsorecruitment@fcdo.gov.uk

Recruitment team

• Email : rsorecruitment@fcdo.gov.uk

Further information

If you wish to make a complaint you should email HRDirectUK@fco.gov.uk. If you are not satisfied with the response you receive from the FCDO you can contact the Civil Service Commission.