Senior Technology Advisor (NIS)
Recruiter
webrecruit
Listed on
17th June 2019
Location
London
Salary/Rate
£40000 - £40000
Salary Notes
£Competitive
Type
Permanent
Start Date
ASAP
This job has now expired please search on the home page to find live IT Jobs.
Senior Technology Advisor (NIS)London, SE1
£Competitive
Team Overview
Our client has had responsibilities for communications network security and resilience for a number of years and they have recently received new responsibilities under the Network and Information Systems (NIS) Regulations. NIS requires the companies in scope to have in place appropriate measures to manage the full range of security and resilience risks but has a particular focus on cyber. NIS aims to achieve a high level of network and information systems security across the European Union among companies operating important services.
Under NIS, our client regulates companies in the "Digital Infrastructure subsector". In summary, this includes companies providing essential services in the following areas:
- DNS resolution and authoritative hosting
- TLD name registries
- Internet Exchange Points
Purpose of the Role
Working closely with the rest of the Network Security and Resilience team, you will be responsible for supporting the roll out of a security assurance program among the companies in scope of the Network and Information Systems (NIS) Regulations that our client is responsible for. You will assess the information that the companies provide about their security arrangements and monitor the progress of any remediation work.
Requirements of the Role
- Supporting the roll out of a security assurance program among the companies in scope of the Digital Infrastructure subsector of the NIS Regulations. This will include, identifying companies that could fall within the scope of the Regulations, developing incident reporting thresholds and processes, developing and drafting security best practice and compliance guidance, carrying out and/or managing security assessments
- Working closely with stakeholders in order to improve the levels of security in the companies our client regulates. This will include other regulators, both within the UK and beyond, NCSC in their role as the UK's NIS technical authority, and DCMS as the lead government department for the sector
- Working with other members of the team in responding to and assessing telecoms and digital infrastructure company responses to security incidents which are reported to our client
- Work with colleagues in the investigations teams to provide technical support in relation to any enforcement activity
Skills, knowledge and experience
- Direct experience of the architectural and operational challenges faced by companies within the NIS Digital Infrastructure subsector
- Comprehensive understanding of conducting security assurance assessments, audits, and managing remediation plans, within the NIS and/or Communication Provider/Telco sector
- Understanding of the types of threat actors that would target our client's regulated sector and cyber security threats they present
- Experience with evaluating technical vulnerabilities and identifying reasonable and appropriate control measures
- Experience across all cyber security risk management domains (strategy; governance and risk management; protection, detection, response, recovery and resumption of services; situational awareness; testing)
- Solid understanding of the internet suite of protocols, networking, routing and DNS including in-depth knowledge of authoritative and recursive DNS servers, including security extensions such as DNSSEC and DoH
- Thorough understanding of IP network topologies
- Experience in practical application of leading practice cyber standards and guidance, such as 10 Steps to Cyber Security and the NIST framework
- Written and oral communication skills including clear and effective presentation to both internal and external audiences
- Appreciation of and desire to promote our client's values of excellence, agility, empowerment and collaboration
Desirable Skills / Experience
- Experience managing security assurance programmes
- Understanding of fixed and mobile network topologies, telephone numbering and VoIP
- Experience of project management including developing and delivering against plans, managing risks and issues
Qualifications
- Preferably educated to degree level (or equivalent) or with substantial relevant information security expertise
- Desirable to have an industry recognised qualification e.g. QiCA, CISA, CISM, CISSP etc
- Willing to potentially go through security clearance to "SC" level
Further Information
Our client offers competitive salaries plus pensions and flexible benefits package.
The organisation recognises that not everyone has the same needs and they strive to offer flexible working arrangements to help manage work and personal commitments. They have family friendly policies that actively seek to support colleagues and enable teams to work in the most effective way.
Our clientis an equal opportunities employer and committed to equality of opportunity for all. As a disability confident employer, all disabled candidates who meet all the essential criteria of a job description will be guaranteed an interview.
To apply for the role of Senior Technology Advisor (NIS), please apply via the button shown.
This vacancy is being advertised by Webrecruit. The services advertised by Webrecruit are those of an Employment Agency.
Additional Keywords: Senior Technology Advisor, NIS, Technology Advisor, Network Engineer, Architecture Analyst, IT Security Analyst, IT Security Engineer.
