STAGE 2
Job Evaluation Number B962
Evaluated on 14/06/2019 Updated on 17/04/2024v5
1
JOB DESCRIPTION
Job Title: Senior Force Information Risk Assurer Job Family: ICT
Role Profile Title: BB4 Police Staff
Reports To: Information Assurance Manager
Band level: 4U
Staff Responsibilities (direct line management of): Nil
a. OVERALL PURPOSE OF THE ROLE: Defines the role, put simply, why it exists.
The overall purpose of the role is to: Act as Technical specialist for Information Assurance (IA) team and colleagues, to ensure all forces’ systems remain compliant with national and local IA standards.
b. KEY ACCOUNTABILITY AREAS: Define the important aspects of the role for which the job holder is responsible for results or outcomes.
The key result areas in the role are as follows:
1. Act as the senior technical advisor to the IA team and as the Information Security Officer for the organization, ensuring compliance to local and national standards and that appropriate controls are in place proportionate to the degree of risk being faced.
2. Proactive scanning of future changes in process, policy and legislation and ensure that the all relevant Risks (Audit, SIRO, Strategic) are monitored and actively worked is fully maintained and updated in line with technology, security, process, estate and infrastructure changes and to implement any necessary solutions to mitigate the risks.
3. Act as role model / mentor to Force Information Risk Assurers and other colleagues including assisting with training, development, and quality assurance reviews.
4. Assist in the development, maintenance, review and test of the forces’ ICT Disaster Recovery and Business Continuity Plans providing assurance of suitability.
5. Work with colleagues to deliver the appropriate response to information security incidents in line with business standards and processes.
6. Ensure the provision of security requirements for 3rd party and supplier contracts and agreements to provide assurance of security of forces’ systems and data.
7. Assist with the development, implementation and delivery of and adherence to, policies and standards to ensure that compliance / regard is paid to legislative and statutory requirements and assess the impact of policy / procedural changes.
8. Contribute to the creation and delivery of guidance, user education and operational procedures surrounding information assurance for the forces.
Job Evaluation Number B962
Evaluated on 14/06/2019 Updated on 17/04/2024v5
2
9. Supervise the delivery of information assurance requirements and advice on new and existing ICT systems, advising project boards and Technical Architects to ensure that controls are adequate and proportionate to the degree of risk faced by the forces.
10. Support the preparation of risk documentation, technical risk assessments, and internal/external audits including SyAP and TPAP (which has replaced the GIRR AND CoCo annual submissions)
c. DIMENSIONS: Include matters such as key result areas that make the greatest demands on the role holder, seasonal pressures, items processed, the number of customers and/or level of authority to make financial decisions or commit other resources.
Further Comments:
Must be delivery focused and able to appreciate Information Security matters in a wider business context, enabling the business to meet its objectives. Must have a customer service ethos and be an effective advocate for Information Security.
Ensure that the Information Assurance function provides advice and guidance, aligned to current HMG and police policies (such as Security Policy Framework, ISO/IEC 27001 and NIST Cyber Security Framework) and supports new technologies such as Cloud, Mobile and Artificial Intelligence technology.
The role holder will work with immediate and or / wider ICT team members to share best practice whilst providing development and performance assistance when required. They will act as a subject matter expert to provide guidance and advice to all TVP staff where necessary.
d. CHARACTERISTICS OF THE ROLE Expertise: Concerned with the level of administrative, professional and/or technical expertise (knowledge and skills) needed to perform the role effectively; may be acquired through experience, specialised training, and/or professional or specialist education and training.
The knowledge or skills required in the role are as follows (essential or desirable): E/D
1. Experienced in Information Assurance or Risk Management, managing small teams through matrix management.
E
2. Effective communication skills, able to relay complex information in ways relatable to the target audience, dealing with customers and stakeholders at all levels E
3. Technical understanding of IT systems and risk management processes. Must be familiar with Cloud and Mobile technologies and associated risk. E
4. Maintain a high degree of integrity and trust when dealing with sensitive and classified information.
E
5. Proven ability to work under pressure, prioritise and manage workload whilst remaining positive and motivated. E
Job Evaluation Number B962
Evaluated on 14/06/2019 Updated on 17/04/2024v5
3
6. Proven understanding of Information Assurance principles, relevant legislation and HMG / Police IA Standards, ISO 27001 and NIST Framework.
E
7. Appropriate professional qualification in relevant discipline (such as: MSc Information Security, CISSP, CESG Certified Professional etc.).
E
8. Take actions required to maintain membership of a professional body for the purposes of continuing professional development through shared experience, knowledge and training.
E
9. Must have capability to travel to different locations across both Forces and undertake all assignments in a timely manner. Due to the requirement to work flexibly, unsocial hours and personal safety for lone working; public transport may not be available or suitable at these times. For this reason a full UK driving licence is considered essential.
E
Additional comments: * At interview, candidates will be asked to confirm their willingness to undertake this Basic Driving Assessment, which in turn will enable the use of a police authorised vehicle.