Information Security and Assurance Advisor April 2021

1

PRACTITIONER JOB PROFILE

POST TITLE:

Information Security and Assurance Advisor

GRADE:

H

DIRECTORATE:

Data, Strategy & Technology

RESPONSIBLE TO:

Senior Information Assurance Manager

LOCATION:

Leek Wootton

JOB PURPOSE:

To provide professional guidance and specialist advice with regard to all information assurance, security and risk matters and ensure development and implementation of all necessary policies, procedures and processes to achieve compliance with national codes of connection for Police information systems and the SYAP. To support the maintenance of the Warwickshire Police Information Security Incident Register, manage and coordinate the investigation of reported incidents and if required make recommendations on corrective measures to prevent a re-occurrence. To undertake onsite auditing of Police facilities for information security and assurance issues, and undertake 3rd Party Supplier assessments to ensure they meet expected security and assurance compliance levels. To support departments with completing data protection impact assessments and providing information assurance and security advice and guidance on matters.

MAIN RESPONSIBILITIES:

1. To support the Warwickshire Police Information Security and Assurance programme to enable appropriate assurance and compliance processes and ensure they meet with wider mandatory information security and assurance requirements and national reporting standards. i.e. Syap

Information Security and Assurance Advisor April 2021

2. To develop, review and implement policies and best practice for the ongoing management and maintenance of information security. and to support the work of the Information Assurance Team within the Force.

3. To implement processes and techniques to regularly assess information assets for compliance with security policies, national policing and best practice information assurance standards, legal and regulatory requirements.

4. To be a point of contact for information security and assurance queries.

5. To plan and undertake information security audits and compliance checks to ensure the physical and data security protection of all information systems and information assets. Ensuring compliance with information security requirements, national guidance, standards, policies, and information risk management, covering both the Force and relevant Suppliers and 3rd parties

6. To identify information security and assurance requirements creating Risk Assessment Reports and/or reviewing other associated assurance documentation, where there are new or changed processes, information assets or activities; working with business areas and project leads to ensure that appropriate assurance is undertaken and documented.

7. Co-ordinate investigative and reporting action of all actual and suspected information security incidents, ensuring that action is taken to prevent reoccurrence and incident trends are monitored to inform organisational learning.

8. To prepare and deliver information security training, education, and awareness in relation to information security, information assurance and information risks.

9. To actively engage all key stakeholders, including partner agencies and third-party suppliers, sharing, storing or processing information owned by Warwickshire Police in the application of information security best practice and relevant standards, ensuring compliance with legalisation, statutory requirements, national and best practice standards Home Office legislation and statutory guidance.

10. To maintain awareness and up to date knowledge of all current relevant information security management and data protection legislation, methods and practices ensuring that an environment of continuous improvement, innovation and emerging best practice are evaluated.

11. Represent professionally and promote the reputation of Warwickshire Police at meetings and groups both internally and externally, including the development of appropriate and constructive partnerships with relevant organisations. To assist with chairing and minute taking at the Tactical Information Assurance Group.

12. To undertake other duties commensurate with the nature, level of

Information Security and Assurance Advisor April 2021

responsibility and grading of this post, as required

Special Conditions:

Regular travel throughout Warwickshire Police

Security level:

MV

PERSON SPECIFICATION

Knowledge:

• A Levels, or equivalent, qualification.

• To hold a recognised information security, data protection or information risk qualification (e.g Certified Information Security Manager (CISM), CISSP, GCRC, CRISC, DP PDP, BCS etc)

• Sound practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001/NIST Framework).

• Sound practical knowledge of current data protection legislation, standards and practice.

• Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that impact upon information security and assurance.

• Able to demonstrate a good understanding of information security concepts and practices concerned with maintaining the confidentiality, integrity, and availability of information.

Desirable:

• Knowledge of the police service IA conditions (Codes of Connection)

• 3rd party and onsite security and assurance auditing

Experience:

• Experience of operational delivery of information security in a multi-site organisation.

• Demonstrable experience of Public Sector Network (PSN)/Syap compliance requirements including evidenced understanding of maintaining accreditation.

• Experience of developing and implementing information security and assurance policies and procedures.

• Experience of undertaking internal audits and accreditation activities, working closely with ICT and other key force teams, external auditors and accreditors

• Experience in facilitating and leading meetings with internal and external stakeholders at senior level.

• Experience of liaising with other organisations and agencies on information security matters.

Key Skills:

• Ability to work to tight deadlines, respond to changing demands and deliver efficient follow-ups.

• Evidence of influencing through facts the motivation and behaviour of

Information Security and Assurance Advisor April 2021

people both internally and externally.

• Effective interpersonal and communication skills, both written and verbal, and the ability to explain complex issues at a variety of levels.

• Ability to undertake sensitive enquiries with limited supervision and to manage and keep secure sensitive material.

BEHAVIOURS: PRACTITIONER

All post holders are expected to know, understand and act within the ethics and values of the Police Service. These nationally recognised behaviours and values are set out in the Competency and Values Framework (CVF). The CVF has six competencies that are clustered into three groups:

• Resolute, compassionate and committed

• Inclusive, enabling and visionary leadership

• Intelligent, creative and informed policing Under each competency are three levels that show what behaviours will look like in practice. This role requires the post holder to be operating at or working towards Level 2 of the CVF.

Author: Sara Smith

Date: June 2026

SPECIAL CONDITIONS CHECKLIST: POLICE STAFF POSTS

Section 1: Allowances Yes No

Shift working X

Weekend working X

Unsocial hours X

Night working X

On Call X

Section 2: Other conditions Yes No

Regular travel throughout the Warwickshire policing area X

Politically Restricted post X

Warranted powers X

Uniform X

Section 3: Health and Safety Risk factors Yes No

Frequent Physical Effort required (give brief details).

X

Exposure to disturbing/unpleasant images or tasks (give brief details).

X

Unpleasant Working Conditions (give brief details).

X

Information Security and Assurance Advisor April 2021

Medical examination X

Hearing test X

Eye sight test X

Night worker X

Lone working X

Section 4: Security Level Yes No

Counter Terrorist Check (CTC) X

Management Vetting (MV) X

LINCOLNSHIRE POLICE

JOB DESCRIPTION

JOB TITLE: Learning & Development ICT Trainer

GRADE: SG1

DEPARTMENT: Learning & Development

ACCOUNTABLE TO: Learning & Development Inspector

STAFF MANAGED: N/A

LOCATION/WORK BASE: Nettleham HQ

JOB PURPOSE AND SCOPE: To design, develop and deliver training courses and materials for officers and staff of Lincolnshire Police or external partners. To maintain exceptional levels of service delivery to all students & partner organisations and act in accordance with the Force Values by being Courageous, Open, Fair and Inclusive - To do so in in accordance with the principles of the Code of Ethics. In your role you will work closely with other members of the People Development team, Force colleagues, internal & external stakeholders, and external delivery teams. CORE WORK AREAS:

1. Deliver training sessions for officers & staff in accordance with national or force policies, with primary focus on ICT systems

2. Prepare training materials, lesson plans and schemes of work for delivery, and update

as required in line with procedural and legislative changes, or version updates

3. Liaise with subject matter experts internally and externally to support continuous improvement of materials and delivery

4. Support, train and guide officers & staff to develop their skills and personal &

professional attitudes in line with force values statement

5. Ensure students are aware of their Data Protection, Security and Computer Misuse responsibilities as well as force policies

6. Ensure students are aware of health issues linked to the use of display screen equipment, act and advise to reduce the potential for strain or injury

7. Ensure students have the required skills to successfully and safely perform their duties

through effective assessment of their learning 8. Undertake Training Needs Analysis for internal teams and external partners working in

force

9. Manage students whilst on courses, assess performance and take prompt action to address inappropriate behaviour, handling any needs or concerns sensitively and confidentially, in accordance with force policies

10. Travel to various locations locally and nationally as required in order to attend courses

or events, and collaborate with other forces or external agencies

OTHER DUTIES: The duties and responsibilities in this job description are not exhaustive. The post holder may be required to undertake other duties that may be required from time to time within the general scope of the post. Any such duties should not substantially change the general nature of the post. EQUALITY AND DIVERSITY: The post holder is required to carry out their duties in a way that supports the force’s Diversity Strategy. HEALTH AND SAFETY: The post holder will take all reasonable care of themselves and of others who may be affected by their acts or omissions. SAFEGUARDING CHILDREN AND VULNERABLE ADULTS: Lincolnshire Police has a duty to promote the welfare of, and safeguard of children and vulnerable adults. The post holder is required to comply with force policy and standard operating procedures in respect of safeguarding children and vulnerable adults. Job description written by: Chief Inspector Phil Vickers Date: 23rd March 2023 Updated: 19/01/24 Insp 617 Edwards

Post Title: ICT Trainer Post Number:

Section: Learning & Development Grade: SG1

This form sets the standard for the person needed for this job, and also will be the basis for shortlisting and for the questions to be asked at interview. The requirements are job-related and described using appropriate words and marked E (Essential) or D (Desirable) as appropriate. There will not necessarily be an entry in every box.

Requirements

Essential (E) or

Desirable (D)

Measurement (see below)

Qualifications/ Training

AET or other relevant training qualification (or working towards)

D A

Experience Experience of working within an ICT training role

D A

Experience in the design and delivery of ICT courses

D A / T

Skills Good organisational skills – being able to plan, prioritise and coordinate activities

E A

Excellent communication skills- being able to explain topics clearly and demonstrate effective written communication

E A / T

Proven ability to use Microsoft Office and other ICT packages

E A

Knowledge Have an understanding and knowledge of diversity in the workplace

E I

Knowledge and experience with relevant ICT police systems

D I

Social Skills Customer focused approach E I

Confident speaking to officers & staff at all levels

E I

Ability to work in a team environment E I

Motivation/

Commitment

Self-motivated and focused on achieving high levels of performance

E I

PERSON SPECIFICATION

Requirements

Essential (E) or

Desirable (D)

Measurement (see below)

Commitment to own learning and development

E I

Ability to work unsupervised E I

Others Appreciation of the requirements around working with personal and sensitive information

E I

Genuine desire to improve organisational performance and to make a difference

E I

Measurement

A. From application form

T. By test after shortlisting

I. Probing at interview

P. Presentation

R. References O. Other (please specify)