Head of Cyber Security Culture and Architecture

**Details**:
**Reference number**:

- 433868

**Salary**:

- £69,500 - £90,600
- A Civil Service Pension with an employer contribution of 28.97%

GBP

**Job grade**:

- Grade 6

**Contract type**:

- Permanent

**Business area**:

- FCDO

**Type of role**:

- Security

**Working pattern**:

- Full-time

**Number of jobs available**:

- 1

**Contents**:

- Location
- About the job
- Benefits
- Things you need to know

**Location**:

- East Kilbride, Milton Keynes

**About the job**:
**Job summary**:
Allen Lane is privileged to be supporting Foreign, Commonwealth & Development Office (FCDO) in their appointment of a Chief Digital and Information Officer - a unique career opportunity of critical importance both domestically and internationally.

The FCDO’s enduring purpose as a department is “to lead the government’s
diplomatic, development and consular work around the world.”
Our UK-based staff work in our headquarters: King Charles Street, London and
Abercrombie House, East Kilbride, and we also have staff based in Milton Keynes.

**Job description**:
The Head of Cyber Security Culture and Architecture is responsible to the Chief
Information Security Officer to define, lead and deliver, through their team, the FCDO’s
secure architecture and its internal cyber security culture.

The role ensures that secure deign is embedded across systems and services while
fostering a workforce that understands, values and upholds security principles.
You will lead a team of security architects who will influence technology delivery,
organisational behaviours and leadership decision making. You will ensure that
architecture, awareness and cultural resilience are delivered in a coordinated way,
aligning secure by design principles, with secure behavioural outcomes.

The Head of Cyber Security Culture and Architecture will work in partnership with
business, digital and security stakeholders, providing the leadership required to drive
continuous development in the following areas:

- Information and Cyber Security Culture: Baseline and define the future
vision for the FCDO’s information and cyber security culture, defining, and
assuring delivery of change leavers to effect cultural change.
- Information and Cyber Security Practices: Baseline existing information and
cyber security policies and procedures, simplifying the policy framework;
developing and publishing clear guidance; and providing robust assurance
within an organisation where mass customisation and risk-based flexibility is
essential for business teams to succeed.
- Information and Cyber Security Architecture: Baseline and define approved
technology stacks, integration patterns and reusable building blocks that have
the latest industry guidance and best practice baked in. The scope of work to
cover all aspects of digital and data systems, including operational technology
(OT) and security management systems.
- Architectural Roadmap for Information Security: Baseline, develop and
assure a consolidated roadmap that defines the culture, policy and technical
architecture characteristics how these will evolve over time, integrating this with
the wider governance and reporting framework.

The Head of Cyber Security Culture and Architecture will be a member of the ICSD
Senior Leadership team and IDD Extended Leadership Group; and is expected to lead
engagement and reporting for their workstreams, working across the IDD to improve
expected to represent the CISO at various HMG and external events where
necessary.

**Person specification**:

- We are looking for those who are able to engage on all Criteria with the potential to
develop further in some areas.
1. Enterprise Security Architecture: Leading the design and assurance of
ensure solutions are resilient, compliant and aligned with organisational objectives,
while advising and guiding senior stakeholders.
complex IT and operational technology (OT) systems, addressing vulnerabilities,
bringing structure to diverse environments, while supervising practitioners and
influencing senior stakeholders to adopt secure design.
interpreting cyber and information security policies and standards to guide complex
or precedent-setting decisions.
4. Information Security Culture: Baselining the future vision for the FCDO’s
information and cyber security culture, defining, and assuring delivery of change
leavers and reporting mechanisms to effect cultural change.
5. Third Party Management: Leading the definition and assurance of cyber and
information security requirements for third-party relationships, advising senior
stakeholders and ensuring suppliers deliver against compliance and risk
management expectations.
6. Management, Leadership and Influence: Embedding a security first culture and
influencing behaviours at all levels to reduce risk and improve resilience. Shaping
Cyber and Information security leadership, strong stakeholder influence, and the
management of high performing teams, whist championing professional
development

**