Security and Business Continuity Administrator

The role:

As the Security and Business Continuity Administrator you will contribute to the successful delivery of outcomes across all business plan deliverables and business as usual activities which require security and business continuity expertise. This is a key role within the Digital & Technology team reporting to the Security & Business Continuity Manager. The role is predominantly concerned with supporting the team with the Commissions security tasks, but you will also be required to advise and guide colleagues on external facing security matters and assist with Business Continuity tasks.

Your responsibilities:

• Assist in maintaining security standards, certifications and accreditations in line with departmental or wider Government requirements.
• Engage with Business Continuity plan owners to monitor maturity and support the programme to deliver business continuity initiatives.
• Support the team in managing Cyber Security issues with key stakeholders, including external parties and actively develop strong working relationships.
• Maintain and help the team with developing, monitoring Cyber Security policies and security controls, ensuring they remain appropriate and proportionate to the threats faced and meet business requirements and central government policies.
• Reporting and escalating information security breaches in an appropriate and timely manner.
• Work closely with the Commercial team to assess and monitor information security compliance and resilience of third-party suppliers.
• Support the team on conducting security risk assessments to established controls to mitigate risk.
• Provide administrative support for internal and external audit and compliance activities.
• Support colleagues with providing awareness on general information security management principles and data protection.
• Provide administrative support to the security team at regular project meetings to manage, report and remediate information security risks.
• Support security awareness training and induction training for colleagues.
• Support the team with the day-to-day Business Continuity activities.
• Assist in incident response and crisis management, in the event of a security breach, natural disaster, or any other emergency.
• Stay informed of the latest security trends, emerging threats, and regulatory requirements, updating the Security and Business team accordingly.

The above does not constitute an exhaustive list of duties. The post holder may be required to perform any reasonable tasks commensurate with the level of responsibility at the request of their Manager.

What were looking for:

Essential criteria:

• Exposure to information / cyber security with a focus on governance, risk, and compliance.
• Strong understanding of key security areas (cyber, personnel, physical, technical) and has experience in using them to protect organisational assets.
• Self-starter, willingness to learn new skills and be self-motivated.
• Strong administrative, verbal and written communications skills using Microsoft 365 software.
• Prioritise and manage tasks with multiple stakeholders internal and external.

Desirable criteria:

• Experienced in internal auditing and gap analysis.
• Industry recognised certifications such as CompTIA Security+, GIAC Security Essentials (GSEC), ISO 27001 Lead Auditor/Implementer, ISC2, ISACA and EC-Council.
• Knowledge around ISO 22301 standard - Business Continuity.
• Incident management experience and an ability to quickly tailor responses to deal with fast moving situations.
• Experience of working within Information Security or IT / Cyber Security, Data Protection governance role(s).