Information Security Manager

I am looking to hire a Information Security Manager for one of my public sector client.

Please read the below job specification:

MINIMUM LEVEL OF CLEARANCE IS SC CLEARANCE

ESSENTIAL SKILLS:

Military background

Qualified Class consultant

have to have experience with RADS (Risk Management Accreditation document set)

Production of Scoping Appraisal, Security Plan, Application Security Cases, Privacy Impact Assessments and Risk Assessments.

Produce briefs, attend meetings and deliver additional documents as required.

Provide subject matter expertise on security projects;

Advice and guidance on security matters relating, but not limited to, security accreditation of department systems;

Production of Risk Managed Accreditation Document Set, Accreditation Plan, Security Architecture, User Security Instructions;

Be familiar with the accreditation procedure and risk assessments to Her Majesty's Government standards;

Be a member of the CESG Listed Advisor Scheme.

Undertake a Scoping Appraisal of the JACKDAW Applications in order to identify potential problems or constraints which may impact on project or system delivery.

Collate information on the JACKDAW Applications in order for an Application Migration Security Case (ASC) to be produced for each of the Applications being hosted on JACKDAW.

Using the existing ASC template, produce an ASC for each of the Applications being hosted on JACKDAW.

In producing the ASCs knowledge and experience will be required of HMG IA Standards 1 &2, JSP 440, JSP 604, DIAN 11 and CESG products. Undertake a Privacy Impact Assessment (PIA) for each Application, producing a pre-PIA and full PIA as required.

PIAs to be produced in accordance with Data Protection Act 1998, JSP 440 and HMG IA Standard No. 1 and 2010DIN05-065.

PIAs to form part of the annexes to RMADS. Assist with the production of the main JACKDAW infrastructure PIA.

Provide Security Assurance Coordinator (SAC) duties as requested by JACKDAW Programme SAC to attend meeting and provide briefs.

Manage adoption of new Apps, amending ASCs as appropriate and producing new ASCs.

Scope and arrange Electronic Security Environment (ESE) Reviews as directed by Programme SAC.

Assist with the production of Risk Balance Cases in relation to the Applications.

Assist with SAC infrastructure issues.