Chief Information Security Officer

Premium Job From AWE



Listed on

30th November 2023




£90000 - £100000



This job has now expired please search on the home page to find live IT Jobs.

Information Services and Security have a vital role to play in a crucial national mission. We're here to enable the organisation to deliver through the use of technology. As AWE transforms itself to meet the needs of the UK's next-generation nuclear deterrent, we need to adapt to deliver data-driven decision making, flexible and future-proofed IT services, adaptable cyber security, support to a multi-billion Pound building programme, and many more. The scale might be daunting to some, but you'll find it stimulating. We've got a long journey that we've only just started and we're looking for motivated people who can take us in the right direction. Your role will contribute directly to that shared mission. We won't deceive you, in some areas we're starting from a low base, but within ten years this organisation will look very different, and you can help make that happen. This is a role where you'll contribute to a legacy of national security for decades to come. The CISO (Chief Information Security Officer) role is an essential part of this. You will report to the Chief of Security, working in an integrated team with other security disciplines. You will be responsible for three areas and their corresponding teams: Information Assurance, Active Cyber Defence, and Information Classifications. You will oversee the operation and expansion of a substantial Cyber Security Operations Centre (SOC). At the heart of the role will be balancing the need to achieve protection for our information and systems with the imperative to enable the business to deliver our demanding programme. Developments in the next few years that you will enable include: integrating and securing Operational Technology, increased use of cloud services and information process outsourcing, supporting one of the largest capital build programmes in the UK, and enabling AWE's path to becoming a digital business. This will all be set against the need to preserve the security of a vital national capability, conforming to demanding security requirements placed on us by government. Location - Reading / Basingstoke area Package - Competitive leadership salary depending on experience, performance related bonus, flexible benefit scheme As part of our People Promise, AWE (one of the best 25 big companies to work for in the UK) has a range of benefits to suit you. These include:Time to recharge your batteries with 270 hours of annual leave (plus every other Friday off work)Consideration for flexible working arrangements so that your work may fit in with your lifestyle.Opportunities for Professional Career Development that include funding for the annual membership of a relevant professional body, access to mentors and trainingEmployee Assistance Programme and Occupational Health ServicesA generous defined contribution Group Personal Pension (we will pay between 9% and 13% of your pensionable pay depending on your own contribution)Life AssuranceDiscounts - access to savings on a wide range of everyday spendingSpecial Leave Policy including paid time off for volunteering, public service (including reserve forces) and caring for your familyA host of voluntary & core benefits to suit your health and wellbeing - more information available on our careers site What will you be required to do?Provide overall oversight of information security risk across AWE including corporate, scientific and operational technology systems.Ensure that appropriate cyber and information security principles, policies and resources are in place to protect information.Provide thought leadership for cyber and information security on the development of polices and systems.Lead the provision and maintenance of cyber defence, monitoring and information assurance services.Provide authoritative technical oversight of information security issues in Information Services (IS) service delivery and systems.Lead engagement with HMG and national bodies and international partners to strengthen AWE cyber defences through collaboration.Ensure that AWE cyber and information assurance staff are appropriately skilled with development plans as necessary.Advise executive and senior management on the identification, mitigation and management of cyber and information risks. Advise executive and senior management on the response to HMG policy, international standards and accepted good practice in cyber and information security.Build and lead a team of professional Information Assurance and Cyber personnel of both AWE staff and contractors.Ensure that assurance and information security governance processes are applied to AWE systems.Maintain active cyber capabilities to protect the company from external and insider threats.Establish and meet relevant skills frameworks for information assurance and cyber staff.As a member of the Security Senior Leadership Team contribute to collective function leadership and manage security activities as delegated by Chief of Security. Whilst not to be considered a check list, candidates should be able to demonstrate some of the following:Communicating risk to senior managers and functional leadershipInterpreting technical security issues for a non-technical audienceAnalysing, articulating, and mitigating cyber threat in general and specifically to the organisationManaging responses to cyber incidents and emerging threats.Setting and managing baseline security controls and associated governanceContributing to the overall mitigation of insider riskOne of the following Certifications or Qualifications would be desirable:

(SCCP SIRA, CISSP, MInstISP) All candidates must be willing and able to obtain and maintain the necessary security clearance for the role. #LI-SW

You are currently using an outdated browser.

Please consider using a modern browser such as one listed below: