Security Assurance Manager

Salary £39,965 - £44,593

The role/team 

The post holder will sit within the wider CIS Service Delivery team and works closely with suppliers to assure the Environment Agency that they maintain a robust, supportable service in line with agreed quality standards with regard to IT security. They make sure the supplier is delivering what they say they are delivering, and work with the supplier to prioritise and resolve issues as and when they arise. 

The post holder works closely with other internal CIS teams. They will use the information provided by technical specialists to validate supplier services, particularly during service transition phases. They will provide assurance to ‘Service Transition’ and projects to ensure that change is being managed effectively by suppliers and in accordance with agreements and contracts. They work with (but do not replace) commercial services to provide an assurance that suppliers are meeting their contractual service obligations such as service levels and escalate accordingly.

Experience/skills required

• Ability to understand and interpret a variety of system logs and reports for potential intrusions, security threats, or breach of policies

• Demonstrable experience of previous security compliance / assurance in an enterprise environment.

• Demonstrable experience and knowledge of security infrastructure principles and practices.

• Demonstrable experience and knowledge of working in an ITIL structure environment and service delivery

• Experience and knowledge of security principles and practices around data security and user  

  management.

• Experience of risk management activities from analysis through to reporting and management.

• Substantial experience of working and managing suppliers.

• Substantial experience within IT including IT security, compliance, governance and analytical roles.

• Ability to effectively communicate detailed technical situations, particularly service problems, to a non technical audience, focussing upon risks to customer service.

• Demonstrable ability to get the best from others by influencing and persuading those not under direct control in order to get the best possible service from suppliers. 

Desirable:

• ITIL v3 Foundation

• Knowledge of the PCI DSS framework

• Knowledge of the HMG Security Policy Framework and the mandatory requirements to ensure compliance

• Current CISSP or CISM certification.

Additional useful information

The role will be based at the Bristol head office. There will be occasional and often unscheduled travel across the country to carry out security work and attend meetings. As a result the post requires a full UK driving licence. 

For further details please contact Paul Key by email: paul.key@environment-agency.gov.uk.  

You can also download the candidate pack for more information. 

Closing date for applications: 18 May 2014

 

Please note that this vacancy will close at 23:59, on the closing date stated above.

 

If you are applying from the Civil Service please note that the Environment Agency is not a part of HM Civil Service and you would not be a Crown Servant in the event of being appointed. Therefore, you will not be eligible for continuous service. For applicants who currently work in local government or other bodies listed in the Redundancy Payments (Continuity of Employment in Local Government etc) (Modification) Order 1999, you may be eligible for continuous service for the purpose of calculating any future redundancy payment. If you are unsure of your status then you should contact your own HR Team.

 

We are fully committed to having an inclusive workforce to reflect the communities we serve. We welcome flexible working patterns for all our vacancies, including job share, so please include clearly any information regarding your preferred working arrangements on your application.

Diversity: it’s in our nature

More Info...