This is an exciting role within Education Scotland where you will be instrumental in helping to drive forward the implementation of an ambitious Information and Cyber Security programme.
Education Scotland is the national improvement agency for Scottish education and an executive agency of the Scottish Government. Our role is to promote improvement through inspection and review, innovation and change, and providing support and challenge to the whole of the education system from early years to adult learning.
The organisation has many programmes of work to deliver this vision, including lead responsibility for the Digital Learning and Teaching (DLT) programme and a transformation programme. These national programmes have a wide range of internal and external customers and stakeholders many of whom are represented on the governance, advisory and supporting groups. These programmes deliver and support a range of new and evolving services and establishes and operates a number of technology related contractual arrangements for our growing customer and user base. This includes Glow, the national online platform for education. This is a fast moving and exciting area of work which offers lots of opportunity for working across many digital services and technologies.
Working with the Head of Information Security, the Technical Delivery Team and Digital Services, amongst others, you will help ensure the confidentiality, integrity and availability of corporate digital systems, including Glow, the national Digital Learning platform for schools which has over one million provisioned users.
You will also help to support the design and implementation of cyber security controls and measures for transformative projects within Education Scotland. This is a high impact role which offers the successful candidate the opportunity of making a strong and significant impact to the benefit hundreds of thousands of learners and teachers across Scotland.
We are currently seeking applications for a Information and Cyber Security Officer based in either Glasgow, Livingston, Dundee or Aberdeen.
Hybrid working from home model is on offer.
This post has a salary range of £41,462 up to £49,860, with the expectation that all new entrants to the Scottish Government would come in on the entry level salary. There are annual increments (eligibility after probation period and thereafter meeting performance criteria) that will allow for salary to incrementally increase up to the maximum amount for that band.
This post attracts a £5,000 DDAT pay supplement after a 3 month DDaT competency qualifying period. Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review.
Responsibilities
The successful candidate will have the opportunity to work on a number of exciting and key cyber security projects, including:
• Helping to secure the largest Microsoft 365 single tenancy in Europe with 1 million provisioned users (circa 650k learners).
• Helping to secure over 20 individuals customers Google Workspace tenancies.
• Maintaining and enhancing the security of a quarter of a million Glow Blogs.
• Providing ongoing expert advice and support for the security of our corporate digital systems, including our CRM and service management systems and our Azure tenancy.
• Helping to protect the information we generate.
• Working closely with global giants such as Microsoft and Google to securely manage the products they provide us with.
• Working to secure our web channels and ensuring our staff are familiar with cyber security policies and procedures.
• Supporting our transformation programme within our corporate digital services environment.
So if you are currently working within an Information Security team or environment, or if you have similar experience and suitable skills please apply.
Your responsibilities will include:
• Threat Identification and Risk Management.
• Security Project Design, Procurement and Implementation.
• Third Party Oversight.
• Internal and External Security Assessments
• Security Awareness Training.
• Providing consultancy on projects.
• Development of Information Security policies, procedures and guidelines and managing compliance.
• Supporting and developing the Information Security Management system.
• Incident Response.
Competencies
Self-Awareness
Communications and Engagement
Analysis and Use of Evidence
Improving Performance
Technical / Professional Competency
Essential Criteria & Qualifications
No specific qualificaitons required for this post.
Essential Criteria
1. Demonstrate knowledge of Information Security standards such as ISO27001 and NIST 800-53.
2. Understanding of both internal and external information security risks and administrative, physical and technical controls to mitigate against these.
3. Experience of providing information security advice and leading on the implementation of Information Security projects.
4. Knowledge of current legislation including the Data Protection Act 2018 and the GDPR.
For further information and to apply with CV and personal statement please visit;
https://work-for-scotland.org/
Explore 
Subscribe to 
Check Out 
© 2022 DIGIT
You are subscribing to jobs matching your current search criteria.
Email notifications will be sent to you Subscribe
Your personalized RSS Feed is below, copy the address to your RSS reader.
Subscribe