Information Security Manager

At the Planning Inspectorate, information security is about enabling people to work with confidence while protecting the systems and data that support important planning decisions across England. As our Information Security Manager, you'll play a key role in creating a secure, resilient and trusted environment for colleagues, customers and stakeholders.

Working within Digital Services, you'll lead our approach to managing information security, helping teams understand and manage risks, respond effectively to incidents and build security into everything they do. You'll work collaboratively with colleagues across the organisation, senior leaders and external partners to ensure our security practices are practical, proportionate and aligned with government standards.

This is a varied and rewarding role where you'll have the opportunity to influence how security is embedded across our services, balance strategic thinking with hands-on delivery, and help foster a positive security culture. If you're passionate about making a real impact, enjoy working with people and want to help shape secure ways of working across a purpose-driven organisation, we'd love to hear from you.

The Planning Inspectorate has a long and proud history in ensuring a fair planning system for England. The work we do has a significant impact on peoples lives, the communities where they live and the economy.

We want our colleagues to be able to work more flexibly and more collaboratively, exploring new and innovative ways to improve the way we provide services.

For further information on the Planning Inspectorate, please visit our careers page at Civil Service Careers

Be part of Digital & Information Risk Services (DIRS)

This role sits within Digital & Information Risk Services (DIRS), part of the Planning Inspectorates Digital Services function. DIRS is responsible for protecting the organisations systems and data, managing security risks, and ensuring services are delivered in a secure and resilient way.

Working in DIRS, youll be at the centre of how we manage information security across the organisation, supporting delivery teams to build secure services and responding to real-world threats and incidents. Youll work closely with colleagues across Digital and the wider business, helping embed practical, risk-based security into everything we do.

Were looking for an Information Security Manager who can turn security requirements into practical solutions that support delivery. This is more than a policy-focused role. You'll work directly with teams across the organisation to understand risks, respond to security incidents and embed security into the design and operation of services from the outset.

As a trusted advisor and security specialist, you'll provide clear, pragmatic guidance that helps teams deliver with confidence. You'll balance risk, security and business needs, ensuring controls are effective without creating unnecessary barriers. This is a hands-on opportunity to influence how security is applied across the organisation, drive meaningful improvements and help build a strong security culture.

What you'll do

• Partner with project, delivery and operational teams to identify, assess and manage security risks.

• Provide practical security advice and guidance on projects, service changes and live operational services.

• Lead and support the investigation and resolution of security incidents, ensuring lessons learned are embedded.

• Work with external partners, including penetration testers and security specialists, to identify threats and strengthen security controls.

Accountabilities

• Maintaining effective oversight of security risks across assigned services and platforms.
• Ensuring security controls are proportionate, practical and aligned to organisational objectives.

• Driving continuous improvement in security practices, resilience and risk management across Digital Services and the wider organisation.

This role is ideal for someone who enjoys working with people as much as technology, can translate security requirements into practical outcomes, and wants to make a visible impact in an organisation delivering important public services.

Salary

New entrants to the Civil Service are expected to start on the minimum of the pay band. Internal rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest

This role is being advertised at Senior Executive Officer Grade

Salary range for the Grade role is 47,564.

Working hours:

Standard working week is 37 hours, Flexible working hours policy available

Office Attendance

This role is contractually based at our office in Bristol, 10-minute walk from Temple Meads train station. We recognise and value the mutual benefits of hybrid working and have a flexible approach to in person attendance, which can vary dependent on the requirements of individual business units - the details of which can be discussed with candidates if invited to attend an interview. Excitingly, we're relocating to a brand new office in December, while maintaining excellent transport links with Bristol Temple Meads station still just a 10 minute walk away. 

We will assess your application against the Essential Criteria listed:

Essential Criteria

• Demonstrable knowledge of cyber and information security tools, principles and best practice.

• Experience of identifying, analysing and assessing information security risks and recommending appropriate mitigation actions.

• Experience of managing or supporting information security incidents and driving actions through to resolution.

• Experience of building and maintaining effective working relationships with technical and non-technical stakeholders.
• Experience of providing practical information security advice and guidance to support service delivery and business outcomes.