Assistant Head of Cyber Security

**Location**: Northwood HQ, Sandy Lane, Northwood, Middlesex, HA6 3HP

**Grade**: Grade 7 (B2)

**Salary**: £57,670 (Appropriate London weighting will be applied to London based roles.)

**Security**: DV - Reserved - Sole UK National

**Summary**

The Assistant Head of Cyber Security for Strategic Command will support the Chief Information Security Officer to lead, drive and manage cyber security transformation across UK Strategic Command (UKSC).

You’ll need to understand the UKSC cyber security threat and risk position, drive a Command level cyber security strategy and transformation plan and support individual business units to improve their cyber security. You will lead cyber security incidents and exercises and ensure that UKSC is taking advantage of all Defence level driven, and funded, cyber transformation activity.

As a Civil Servant, you’ll also have access to our range of excellent benefits, including flexible working, discount schemes, generous leave allowance and a market-leading Civil Service pension.

This post is eligible for a Digital Skills Allowance of up to £15,300 per annum. Eligibility for this allowance will be assessed at interview against 4 core technical skills only and reviewed annually in line with MOD policy.

Passionate about using your skills to make a critical difference? Your next career move could be here.

**Job description**

In this role, you’ll also be responsible for co-ordinating and driving system remediation activity to systems outside of the risk appetite and to manage incident response procedures and investigations of cyber security events or incidents. You will be responsible for ensuring the incident is contained and lead remediation activity, identify potential process improvements, and maintain organisational readiness through preparedness exercises.

You’ll lead a growing team, developing the core skills and expertise so that they can develop and maintain a wider understanding of cyber security and capabilities across complex and challenging environments.

**Responsibilities**

Responsibilities include:

- Lead, drive and manage the incident response strategy and transformation plan for UKStratCom across all business units.
- Support cyber security agenda items at UK Strategic Command meetings and individual business unit leadership team meetings as required.
- Position the cyber security threat for all UKStratCom business units liaising with Defence Intelligence.
- Manage & cohere UKStratCom incident response exercises and scoping, design and governance of threat-hunting activity.
- Communicate the significance of the results of investigations and risk mitigation outcomes, guiding UKStratCom in the improvement and maintenance of a robust response to new threats and attack vectors.
- Manage post-incident review, including root cause analysis, to feedback information and to improve monitoring.
- Provide specialist, tailored advice on mitigation, handling escalations with risk and service owners as appropriate.
- Liaise with Defence Cyber Defence team and execute strategic taskings including Critical National Infrastructure, supply chain security and support into the cyber security military taskforce.
- Lead cyber security exercising programme for UKStratCom.
- Line management of several direct reports within the team. Resource management across the team, ensuring that the relevant workload is delivered as agreed.
- Support the development of mechanisms to drive continuous improvement and encourage the sharing of best practice. Maintain close liaison with key stakeholders in Defence Digital, Defence Security & Resilience and wider MOD.
- Deputise for the Chief Information Security Officer when required.

**Person specification**

This role should appeal to someone who has broad equivalency and experience at SFIA 8 Framework: Level 5 - ‘Ensure & Advise’ and/or Level 6 - ‘Initiate & Influence’.

We are committed to encouraging and enabling our staff to develop in and above their role and we will support you in undertaking further learning and development opportunities, within your designated field and beyond. Wherever possible, we will provide upskill learning options and further training to support your continuous professional development.

Desirable qualifications, accreditation, memberships or skills:

- Certificate in Information Security Management Principles (CISMP)
- Certified Information Security Systems Professional (CISSP)
- Certified Cyber Professional (CCP)
- Membership of CIISP, CIISec, BCS or recognised equivalent

Ideally, you’ll also have the following:

- The ability to build long term relationships with key internal and external stakeholders.
- Highly effective networking and the ability to advise and influence people.
- Experience of leading and managing a team.
- Ability to communicate effectively to a variety of audiences, synthesising information to portray key messages and facilitate effective decision making.

This post is eligible for a D