Digital Security Specialist

Digital Security Specialist

Corporate Services Group, Digital Services Team - Band 2A

Audit Scotland provides the Auditor General and Accounts Commission with the services they need to carry out their duties. Together we ensure that the Scottish Government and public-sector bodies throughout Scotland are held to account for the proper, efficient and effective use of public money.

We employ around 340 staff in a wide variety of roles, working from our main offices in Edinburgh and Glasgow, and through a network of regional offices across Scotland.

**Overall purpose of the role**

As part of the Digital Service Desk you will work to resolve colleague issues, while running projects to improve services and infrastructure. Working to constantly improve resilience and strengthen security. You rise to the challenge of solving complex problems under pressure, always keeping up to date with current threats and their mitigations. You are analytical, solution focused and able to work on your own and as part of the team. You are passionate about digital security and are confident explaining complex technical issues to non-specialist audiences.

**What you will be doing**

We encourage mobile working allowing our colleagues to work from anywhere at any time.

We are ISO27001 certified and continually strive to improve our information security. You will lead in optimising our network, improving security and will be a key contact for security and other incidents as they arise:

- Working with the Digital Services Team, you will focus on network security and incident management as well as improving our resilience
- Improve our network configurations and monitoring over a range of devices
- Progressing our real-time monitoring capabilities, providing awareness of potential intrusions,

Assistance available from Human Resources - 0131 625 1646 Page **1**

focusing on network security and threat reaction
- Providing up to date education on specific security threats to the Digital Services Team. Co
- ordinate with the National Cyber Security Centre and Scottish public sector on all security issues.
- Lead in responding to and investigating security incidents, develop local incident handling procedures, and report all incidents to the appropriate incident response authority
- Improve our Enterprise Mobility and Security to strengthen device security for company devices and BYOD.
- Providing forensic analysis of security incidents and implement remediation
- Working to maintain and develop the best practice we have established while becoming ISO

27001 certified.
- Enhance our Office 365 and Azure security and resilience.

**Knowledge and experience**

We think you’ll identify with most of the following:

- You enjoy the pressure of balancing multiple complex projects as well as resolving everyday incidents
- You can analyse network traffic to optimise, diagnose and resolve issues
- You can, at any time, make rapid fact-based decisions and take associated immediate action to swiftly counter a potential threat
- You can communicate highly-detailed technical issues with the digital services team as well as convey these concepts to other parts of the business in a way everyone can understand.
- You can draw upon research, experience and evidence to proactively and continuously improve our digital workspace providing a safe and optimal environment
- You take ownership of issues and commit to their resolution - you deliver on time, on budget and to a high quality
- You work in a diverse accepting environment showing respect to everyone in the team

Assistance available from Human Resources - 0131 625 1646 Page **2**

**Person specification - specific knowledge and experience**

**Essential** **S, I or A**
- Expert understanding of network technologies (e.g. firewalls, proxies, IDS/IPS) S/I
- Hands on experience with; Cisco, Citrix and Hyper-V, web security and cloud S/I connectivity
- Hands on experience with Microsoft Now, Office 365 & Azure Cloud platforms
- Hold a degree (or equivalent level qualification or experience) in a computer S/I science related area. S/I

**Desirable**
- Experience of recognised information security management specified by I

ISO27001
- Excellent communication skills, with the ability to communicate complex I technical issues effectively to a wide range of stakeholders.

*S = Shortlisting criteria I = Interview criteria A = Assessment / Exercise

**Other conditions**

Audit Scotland is committed to ensuring that:

- We minimise our impact on the environment in accordance with Government policy affecting public sector organisations.
- We uphold the principles of equality, fairness & diversity.
- We all work within a safe environment and adhere to good standards of health & safety.
- All information is protected and managed appropriately.
- We maintain independence and political neutrality.

Assistance available from Human Resources - 0131 625 1646

**Salary**: £42,853.00-£48,982.00 per year

Schedu