Cyber Security Practitioner
Based in Preston/Farnborough (Remote working available)
£38,000 - £42,000 per annum + 2.5% bonus
Must be eligible for SC Clearance
Your role will be to ensure systems/services are built and configured in-line with applicable Cyber Security Standards.
What you'll be doing:
* Deliver the Cyber through life Assurance capabilities to assure the compliance and effectiveness of applicable Cyber security controls to meet NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS).
* Assist in the delivery of Cyber Essentials and Cyber Essentials plus certification across applicable EIT enterprise managed networks (UK and International) to meet MoD DEFCON contractual requirements.
* Support other Information Security certifications such as ISO/IEC 27001/FAR to underpin international networks and differing overseas requirements.
* Support the delivery of an intelligence led and risk-based compliance programme across Sectors, UK Business Groups and Service Providers to underpin HMG Secure by Design requirements.
* Report the Performance/Health of applicable security controls to assure compliance and effectiveness aligned with NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS) to highlight key issues to senior stakeholders.
Your skills and experiences:
Essential:
* Strong track records of assuring/auditing the security of services in the Government sector (or commercial organisations bound by HMG standards)
* Strong analytical background with the ability to analyse and interpret large and complex data sets and articulate observations, conclusions, and recommendations to senior audiences
* Knowledge of HMG and industry standard security policy, standards and good practice guidance and their application to a variety of IT solutions processing protectively marked information
* Wide ranging knowledge of application, infrastructure and security technologies and knowledge of implementing them in a secure configuration
* Previous exposure to gap analysis reporting
* ISO/IEC 27001 knowledge
* CISM-P IT Security qualification
Desirable:
* NSCP Practitioner Certificate