Cyber Security Officer

To contribute to the formulation, development and review of all University policies,

processes and procedures which relate in any way to information and cyber security

activities of the University. To be an active member of the University’s Cyber

Security Team that provides help and guidance to the entire University on cyber

security.

To ensure the IT operations and development activities of the University meet the

required standards of the University’s cyber strategy and any external stakeholders.

To manage the formulation, development, delivery and continuous improvement

of the Universities staff and student education and awareness programme.

**Key Responsibilities**and Accountabilities**:
Analysis, Reporting and Documentation
- To provide specialist advice and guidance to staff and students on cyber

security. This involves risk management, assisting with the drafting of, and

compliance with standards and providing authoritative advice to management

and professional IT staff.
- To assist with the development and maintenance of institutional policies,

processes, procedures, guidelines, and standards which relate to the cyber

security activities.
- To support, and in the absence of, the Cyber Security Architect, reporting

security issues to senior members.
- Participate, where appropriate, in forensic evidence gathering, disciplinary

measures and criminal investigations as part of the University’s Technical

Investigation Procedure.
- Contribute to the production of IT systems architectures with associated

security component specifications.
- Devise new or revised operational procedures relating to security controls of

all IT environments, products or services ensuring that any system changes

required to maintain security are implemented.

Security Operations
- Conduct security control reviews and business risk assessments across a full

infrastructure, managed services, and user interfaces.
- Identify and manage assessments of threats to the confidentiality, integrity,

and availability of the IT estate.
- Formulate, develop, and implement IT security plans, taking into account

current best practises, legislation and regulations to support the cyber security

strategy to ensure an effective level of cyber hygiene is met.
- Influence the design, procurement and operational controls and the secure use

of IT solutions.
- Provide technical management of the IT security operation, working to ensure

agreed service levels are met and all relevant procedures are adhered to.
- Monitor the wider environment to gain knowledge and understanding of

current emerging threats and report the risks posed to the University.
- Contribute to the technical analysis of system information assessing for

vulnerabilities, threats and risks posed to the University.

Planning & Organising
- To assist, as deemed appropriate by the Cyber Security Architect, with the

implementation and ongoing management of prevailing information and cyber

security standards (e.g., ISO27001 & Cyber Essentials) including the gathering

and preparation of information to support the certification processes.
- To research, evaluate, and assist in the deployment of technical solutions

which help to protect the University’s critical IT infrastructure.
- Support the development of architectural standards that are fundamentally

secure.
- Assist in the development and improvement of:

- Network and server hardening policies including deployment of an

approved configuration management system.
- Network vulnerability scanning and penetration testing.
- Network and server event monitoring and compliance reporting.
- Metrics to measure the overall Cyber Security risk to the University.
- The Cyber Incident response plan and red team exercising.

Problem Solving
- To receive, classify, triage, and actively seek out suspected and actual security

incidents in a time and cost-effective manner. This includes being a first point

of contact for some incidents, working with other teams to record, classify and

contain incidents as well as tracking security incidents to ensure closure within

an appropriate timeframe.

Continuous Improvement
- To, in conjunction with the Cyber Security team and Information Governance

team, develop and maintain the institutional education and awareness

programme which aims to promote a culture of good cyber security practice

throughout the University. This will include producing and maintaining content

when needed and provide statistics on completion across the University.
- To keep abreast of potential and emerging threats to the University’s

information systems, legislative and security framework changes and other IT

activities. To assess the risks that the threats represent and to advise senior

managers, system and service managers and other senior professional IT staff

and managers as appropriate.
- To measure that all security related processes and procedures adopted in all

parts of the Un