Information and Data Security

**Details**:
**Reference number**:

- 235969**Salary**:

- £39,195 - £53,324- London: £43,160 - £53,324 / National: £39,195 - £45,386**Grade**:

- Senior Executive Officer**Contract type**:

- Permanent**Business area**:

- GIAA: OD5 - CSD - Corporate Services**Type of role**:

- Knowledge and Information Management**Working pattern**:

- Flexible working, Full-time, Part-time**Number of posts**:

- 1Contents

Location

About the job

**Benefits**:
Things you need to know

LocationAbout the job

**Summary**:
**About Government Internal Audit Agency**

We are an executive agency of Her Majesty’s Treasury (HM Treasury), established in April 2015 to improve the quality of internal audit provided to central government.

Most of the Agency’s people are professionally qualified internal auditors, accountants or investigators.

Many are also specialists in areas including counter fraud, project management, digital and commercial audit.

We lead both the Government Internal Audit Profession and the Government Internal Audit Function.

Our workforce brings with it a unique depth of experience gained in a wide range of government departments, related bodies and other sectors.

This enables us to offer a high-quality service based on cross-government insight and a strong understanding of our customers’ business.

In GIAA, we aim to be a great place to work and to ensure that we have the capability and capacity to make even more of a significant contribution to achieving A Brilliant Civil Service over the coming years.

Our initial focus was on becoming “a single audit practice”. We are now focused on taking GIAA to the next level so we can provide better insights and better outcomes for government.

**Job description**:
GIAA’s Corporate Services Directorate provides the agency with the core services and support it needs to provide better insights, better outcomes to our customers. Our services include IT, Estates, Health and Safety, People and Culture, Communications, Governance, Finance, Commercial and Management Information.

Reporting to the Deputy Director of Infrastructure Support and Commercial, this role provides the opportunity for you to take a leading role in supporting the Agency’s Senior Information Risk Offer (SIRO) and Data Protection Officer (DPO) with technical guidance and assurance over data protection and information security matters, to help the Agency meet its business objectives through activities.

As well as using your skills to manage the protection of all GIAA information assets, including data held on IT systems and manual records, in line with GDPR and other applicable legal frameworks, you will also work closely with the GIAA Senior Information Responsible Owner (SIRO) and Data Protection Officer (DPO), providing robust advice and guidance as required to handle data incidents and other related data security issues, handling and logging data breaches, ensuring that all risks are mitigated and any necessary remedial action is taken.

You will also have the opportunity to use and expand your skills and experience by leading a review of the suite of GIAA information security and cyber security policies and procedures, ensuring that GIAA has a robust and independent risk-based assurance processes governing Information Security. You will design and developing regular assurance reports for the SIRO and the GIAA Business Information and Cyber Security Committee with the aim of providing robust and evidence-based assurances to senior responsible officers regarding GIAA compliance with legislation and designated policies. Your work will set the standards for Information Asset Owners to operate within including providing standard templates for key documents including Information Asset Registers and Record of Processing Activity. You will also work closely with GIAA information system owners to ensure appropriate controls are in place to safeguard and monitor system data.

Acting as the GIAA focal point for all information management and cyber related data security issues, you will regularly converse with senior managers/stakeholders across GIAA to ensure risks are identified and managed.

To undertake this role fully you will have experience and a knowledge of Knowledge and Information Management, and experience in implementing and managing KIM frameworks.

**Responsibilities**:

- Setting policies and strategies to ensure that all GIAA data is held securely, only accessed by those authorised to view, and retained in line with government retention policies and procedures.
- Improving the Agency’s understanding and utilisation of our core information repository InfoStore (Sharepoint), monitoring compliance and providing remedial training where necessary.
- Developing and implementing a training and knowledge sharing strategy to ensure all GIAA staff are aware of their data security responsibilities.
- Providing advice and guidance to GIAA senior leaders regarding information secu