ROLE PROFILE

Role Title Digital Business Analyst Reporting to Digital Programme Manager

Section Digital Innovation District/Department Digital Policing Directorate

Tenure Rank/Grade POB

Part A – JOB DESCRIPTION Overall purpose of role

To engage with the buiness ensuring the execution, delivery and management of client expectations in relation to any significant change in technology or technology services used by the business. Work to improve alignment of Digital Policing services to business requirements across all areas of the business, communicate strategy and direction of the department and resolve customer issues of service delivery.

Key outputs for role –

1. Lead by example and behave in line with the Police Code of Ethics ensuring that Force values and behavioural expectations are clearly understood and considered by managers, officers and staff in their decision making and actions; reinforcing and influencing them through all interactions and processes.

2. Lead by example, treating others with dignity, fairness and respect at all times, regardless of identity, background, status or circumstances. Embrace and invest in West Yorkshire Police’s approach and commitment to Diversity, Equality and Inclusion (DEI), recognising its importance and value. Implement this commitment wherever possible in day to day duties and interactions with colleagues and our communities, with an aim to integrate equality and human rights into everything we do.

3. Engage with the business functions leadership teams to understand their strategic aims and challenges, interpreting those needs and collaborating across the Digital Policing Directorate function to identify solutions and outcomes which support Force and Digital Policing priorities and strategy.

4. Analyse, develop and design requirements for new systems and enhancements to existing systems to ensure the system design fits the needs of the users and conforms to Digital Policing infrastructure standards by working with customers to determine system and business needs. Utilising various business analytical methodologies to accurately capture customer requirements to ensure organisational priorities are met and that data maximisation and data quality considerations are key to decision making whilst maximising use of existing solutions.

5. Provide professional expertise, advice and guidance to the Force through the application of the appropriate tools and techniques in relation to technology change projects involving process and technology consultancy, operational research, ensuring feasibility ,problem-solving and decision making, systems analysis, , simulation modelling and process improvement in support of the strategic priorities of the Force.

6. Managing the implementation of small technology projects, as appropriate, utilising project management techniques (ie Prince 2, Scrum, DSDM, Agile etc). Managing internal resources and external suppliers, project planning, business benefits identification and piloting to ensure successful testing and implementation.

7. Working with procurement leads to ensure acquisition processes are followed for new solutions identified and relevant tender documentation is produced and used during procurement activity.

8. Engage with the business at all levels to promote, build and sustain the relationship that the Digital Policing Directorate has with the business functions leadership, communicating the Digital Policing strategy and raising awareness of it. Communicate principles such as ITIL, DSDM and SCRUM to Digital Policing customers and users to ensure an understanding of the methodologies and the best practices contained therein.

9. Utilising stakeholder management techniques, develop and maintain a process for communication, resolving customer complaints and report upon customer satisfaction issues to Digital Policing management.

10. Diagnose problem situations, select and apply appropriate solutions based upon informed professional judgement and extensive experience and be responsible for the delivery of an effective resolution that informs Senior Leaders’ decision-making.

11. Review and assess implemented change following delivery and report back to assist in the service improvement programme, assessing the enhancement to business processes.

12. Support the delivery of complex projects working with Digital IT Project Managers or Digital Delivery Leads to ensure successful delivery and ensure customer requirements are met.

Dimensions (Financial/Statistical/Mandates/Constraints/No. of direct reports)

• Liaise with senior leaders and other key customers of the IT department in Divisions and Departments to communicate IT strategy and policies, and to investigate and define issues with service delivery and quality of service.

• Represent and promote the work of the Force and department, as well as liaise at local, regional and national levels on issues pertaining to IT projects undertaken or in relation to specialist, professional areas of expertise.

• Communicate and support the department’s quality policy by working to the documented processes and procedures ensuring compliance with Data Protection and Information security principles.

• Responsible for budget management for projects up to the value of £250k.

Work/Business contacts

Internal: District and Departmental budget holders and key customers of Digital Policing. All levels of Police Officers (up to an including chief officers) and Police Staff to resolve Digital Policing customer complaints/issues. Digital Policing Department Senior Leadership Team. All Digital Policing colleagues to maintain up to date knowledge of developments and projects.

External: Suppliers, other Forces and organisations as needed to resolve service issues and identify and communicate best practice.

Expertise in Role Required (At selection - Level 1) Essential or

Desirable

• Proven experience of business relationship management and stakeholder management

• Knowledge and working experience of performing business analysis functions including business systems and business process modelling

• Knowledge and working experience of requirement gathering for technical solutions including techniques such as MoSCoW

• Good understanding and awareness of the latest/emerging digital technologies and capabilities

• Knowledge of marketing and communication with customers along with excellent written, oral and interpersonal skills

• Good understanding and awareness of general project management and planning principles.

• A proven methodical and analytical approach to problem solving

• Awareness of current, emerging and planned Digital Policing provided capabilities/services

• Knowledge and a working experience of formal project management methodology, such as Prince 2, Scrum, DSDM, Agile etc.

• Proven experience of successfully influencing Senior and Middle Managers in respect of technology change and technology projects

Essential

Essential

Essential

Essential

Essential

Essential

Essential

Desirable

Desirable

Desirable

Other (Physical, mobility, local conditions)

• Has the ability to travel for business purposes to enable visits to any operational site in the Force area.

Essential

• Has a full current UK/European driving licence with access to a motor vehicle and is prepared to use this for business purposes.

Desirable

Expertise in Role - After initial development - Level 2

• Has successfully developed a network of effective working relationships with key customers

• Proven experience of investigating and resolving service delivery issues

• Proven experience of solution delivery using business analysis and project management expertise.

Structure

NOTE – The role report to either a Digital Programme Manager or Digital Delivery Manager, both within Innovation. All BA’s work across the Whole area.

PART B – COMPETENCIES & VALUES Competency and Values Framework – Competency and values framework (CVF) | College of Policing

Level 1 –Practitioner

PART C - DEVELOPMENT OF ROLE

Expertise in Role (Advanced - Level 3)

• Makes a positive contribution to the development of the strategy and planning function to ensure that the needs of the Force and Department are met

• Is a recognised source of expertise in his/her functional area and can advise on a range of issues. Recognised and is used as an expert in clarifying and resolving technology related change demands

• Has directly contributed to transformational organisational improvements and delivered significant efficiency improvements and provable business benefits

PART D - ACCESS & VETTING

Standard IT Access Default

Police Building (Perimeter and Zone access) Perimeter Access to Police Buildings where based

Vetting Level Management Vetted

Date accepted as a role profile 30th August 2022

Digital Programme Manager/ Digital Delivery Manager

Project Support Analyst

Digital Project Manager Digital Business Analyst

Job Evaluation Number B962

Evaluated on 14/06/2019 Updated on 17/04/2024v5

1

JOB DESCRIPTION

Job Title: Senior Force Information Risk Assurer Job Family: ICT

Role Profile Title: BB4 Police Staff

Reports To: Information Assurance Manager

Band level: 4U

Staff Responsibilities (direct line management of): Nil

a. OVERALL PURPOSE OF THE ROLE: Defines the role, put simply, why it exists.

The overall purpose of the role is to: Act as Technical specialist for Information Assurance (IA) team and colleagues, to ensure all forces’ systems remain compliant with national and local IA standards.

b. KEY ACCOUNTABILITY AREAS: Define the important aspects of the role for which the job holder is responsible for results or outcomes.

The key result areas in the role are as follows:

1. Act as the senior technical advisor to the IA team and as the Information Security Officer for the organization, ensuring compliance to local and national standards and that appropriate controls are in place proportionate to the degree of risk being faced.

2. Proactive scanning of future changes in process, policy and legislation and ensure that the all relevant Risks (Audit, SIRO, Strategic) are monitored and actively worked is fully maintained and updated in line with technology, security, process, estate and infrastructure changes and to implement any necessary solutions to mitigate the risks.

3. Act as role model / mentor to Force Information Risk Assurers and other colleagues including assisting with training, development, and quality assurance reviews.

4. Assist in the development, maintenance, review and test of the forces’ ICT Disaster Recovery and Business Continuity Plans providing assurance of suitability.

5. Work with colleagues to deliver the appropriate response to information security incidents in line with business standards and processes.

6. Ensure the provision of security requirements for 3rd party and supplier contracts and agreements to provide assurance of security of forces’ systems and data.

7. Assist with the development, implementation and delivery of and adherence to, policies and standards to ensure that compliance / regard is paid to legislative and statutory requirements and assess the impact of policy / procedural changes.

8. Contribute to the creation and delivery of guidance, user education and operational procedures surrounding information assurance for the forces.

Job Evaluation Number B962

Evaluated on 14/06/2019 Updated on 17/04/2024v5

2

9. Supervise the delivery of information assurance requirements and advice on new and existing ICT systems, advising project boards and Technical Architects to ensure that controls are adequate and proportionate to the degree of risk faced by the forces.

10. Support the preparation of risk documentation, technical risk assessments, and internal/external audits including SyAP and TPAP (which has replaced the GIRR AND CoCo annual submissions)

c. DIMENSIONS: Include matters such as key result areas that make the greatest demands on the role holder, seasonal pressures, items processed, the number of customers and/or level of authority to make financial decisions or commit other resources.

Further Comments:

Must be delivery focused and able to appreciate Information Security matters in a wider business context, enabling the business to meet its objectives. Must have a customer service ethos and be an effective advocate for Information Security.

Ensure that the Information Assurance function provides advice and guidance, aligned to current HMG and police policies (such as Security Policy Framework, ISO/IEC 27001 and NIST Cyber Security Framework) and supports new technologies such as Cloud, Mobile and Artificial Intelligence technology.

The role holder will work with immediate and or / wider ICT team members to share best practice whilst providing development and performance assistance when required. They will act as a subject matter expert to provide guidance and advice to all TVP staff where necessary.

d. CHARACTERISTICS OF THE ROLE Expertise: Concerned with the level of administrative, professional and/or technical expertise (knowledge and skills) needed to perform the role effectively; may be acquired through experience, specialised training, and/or professional or specialist education and training.

The knowledge or skills required in the role are as follows (essential or desirable): E/D

1. Experienced in Information Assurance or Risk Management, managing small teams through matrix management.

E

2. Effective communication skills, able to relay complex information in ways relatable to the target audience, dealing with customers and stakeholders at all levels E

3. Technical understanding of IT systems and risk management processes. Must be familiar with Cloud and Mobile technologies and associated risk. E

4. Maintain a high degree of integrity and trust when dealing with sensitive and classified information.

E

5. Proven ability to work under pressure, prioritise and manage workload whilst remaining positive and motivated. E

Job Evaluation Number B962

Evaluated on 14/06/2019 Updated on 17/04/2024v5

3

6. Proven understanding of Information Assurance principles, relevant legislation and HMG / Police IA Standards, ISO 27001 and NIST Framework.

E

7. Appropriate professional qualification in relevant discipline (such as: MSc Information Security, CISSP, CESG Certified Professional etc.).

E

8. Take actions required to maintain membership of a professional body for the purposes of continuing professional development through shared experience, knowledge and training.

E

9. Must have capability to travel to different locations across both Forces and undertake all assignments in a timely manner. Due to the requirement to work flexibly, unsocial hours and personal safety for lone working; public transport may not be available or suitable at these times. For this reason a full UK driving licence is considered essential.

E

Additional comments: * At interview, candidates will be asked to confirm their willingness to undertake this Basic Driving Assessment, which in turn will enable the use of a police authorised vehicle.

Information Security and Assurance Advisor April 2021

1

PRACTITIONER JOB PROFILE

POST TITLE:

Information Security and Assurance Advisor

GRADE:

H

DIRECTORATE:

Data, Strategy & Technology

RESPONSIBLE TO:

Senior Information Assurance Manager

LOCATION:

Leek Wootton

JOB PURPOSE:

To provide professional guidance and specialist advice with regard to all information assurance, security and risk matters and ensure development and implementation of all necessary policies, procedures and processes to achieve compliance with national codes of connection for Police information systems and the SYAP. To support the maintenance of the Warwickshire Police Information Security Incident Register, manage and coordinate the investigation of reported incidents and if required make recommendations on corrective measures to prevent a re-occurrence. To undertake onsite auditing of Police facilities for information security and assurance issues, and undertake 3rd Party Supplier assessments to ensure they meet expected security and assurance compliance levels. To support departments with completing data protection impact assessments and providing information assurance and security advice and guidance on matters.

MAIN RESPONSIBILITIES:

1. To support the Warwickshire Police Information Security and Assurance programme to enable appropriate assurance and compliance processes and ensure they meet with wider mandatory information security and assurance requirements and national reporting standards. i.e. Syap

Information Security and Assurance Advisor April 2021

2. To develop, review and implement policies and best practice for the ongoing management and maintenance of information security. and to support the work of the Information Assurance Team within the Force.

3. To implement processes and techniques to regularly assess information assets for compliance with security policies, national policing and best practice information assurance standards, legal and regulatory requirements.

4. To be a point of contact for information security and assurance queries.

5. To plan and undertake information security audits and compliance checks to ensure the physical and data security protection of all information systems and information assets. Ensuring compliance with information security requirements, national guidance, standards, policies, and information risk management, covering both the Force and relevant Suppliers and 3rd parties

6. To identify information security and assurance requirements creating Risk Assessment Reports and/or reviewing other associated assurance documentation, where there are new or changed processes, information assets or activities; working with business areas and project leads to ensure that appropriate assurance is undertaken and documented.

7. Co-ordinate investigative and reporting action of all actual and suspected information security incidents, ensuring that action is taken to prevent reoccurrence and incident trends are monitored to inform organisational learning.

8. To prepare and deliver information security training, education, and awareness in relation to information security, information assurance and information risks.

9. To actively engage all key stakeholders, including partner agencies and third-party suppliers, sharing, storing or processing information owned by Warwickshire Police in the application of information security best practice and relevant standards, ensuring compliance with legalisation, statutory requirements, national and best practice standards Home Office legislation and statutory guidance.

10. To maintain awareness and up to date knowledge of all current relevant information security management and data protection legislation, methods and practices ensuring that an environment of continuous improvement, innovation and emerging best practice are evaluated.

11. Represent professionally and promote the reputation of Warwickshire Police at meetings and groups both internally and externally, including the development of appropriate and constructive partnerships with relevant organisations. To assist with chairing and minute taking at the Tactical Information Assurance Group.

12. To undertake other duties commensurate with the nature, level of

Information Security and Assurance Advisor April 2021

responsibility and grading of this post, as required

Special Conditions:

Regular travel throughout Warwickshire Police

Security level:

MV

PERSON SPECIFICATION

Knowledge:

• A Levels, or equivalent, qualification.

• To hold a recognised information security, data protection or information risk qualification (e.g Certified Information Security Manager (CISM), CISSP, GCRC, CRISC, DP PDP, BCS etc)

• Sound practical knowledge of current Information Security Cyber and Assurance Management standards and best practice (including ISO 27001/NIST Framework).

• Sound practical knowledge of current data protection legislation, standards and practice.

• Knowledge and understanding of the Technical, Human Resource, Procurement, Project, and Physical Security issues that impact upon information security and assurance.

• Able to demonstrate a good understanding of information security concepts and practices concerned with maintaining the confidentiality, integrity, and availability of information.

Desirable:

• Knowledge of the police service IA conditions (Codes of Connection)

• 3rd party and onsite security and assurance auditing

Experience:

• Experience of operational delivery of information security in a multi-site organisation.

• Demonstrable experience of Public Sector Network (PSN)/Syap compliance requirements including evidenced understanding of maintaining accreditation.

• Experience of developing and implementing information security and assurance policies and procedures.

• Experience of undertaking internal audits and accreditation activities, working closely with ICT and other key force teams, external auditors and accreditors

• Experience in facilitating and leading meetings with internal and external stakeholders at senior level.

• Experience of liaising with other organisations and agencies on information security matters.

Key Skills:

• Ability to work to tight deadlines, respond to changing demands and deliver efficient follow-ups.

• Evidence of influencing through facts the motivation and behaviour of

Information Security and Assurance Advisor April 2021

people both internally and externally.

• Effective interpersonal and communication skills, both written and verbal, and the ability to explain complex issues at a variety of levels.

• Ability to undertake sensitive enquiries with limited supervision and to manage and keep secure sensitive material.

BEHAVIOURS: PRACTITIONER

All post holders are expected to know, understand and act within the ethics and values of the Police Service. These nationally recognised behaviours and values are set out in the Competency and Values Framework (CVF). The CVF has six competencies that are clustered into three groups:

• Resolute, compassionate and committed

• Inclusive, enabling and visionary leadership

• Intelligent, creative and informed policing Under each competency are three levels that show what behaviours will look like in practice. This role requires the post holder to be operating at or working towards Level 2 of the CVF.

Author: Sara Smith

Date: June 2026

SPECIAL CONDITIONS CHECKLIST: POLICE STAFF POSTS

Section 1: Allowances Yes No

Shift working X

Weekend working X

Unsocial hours X

Night working X

On Call X

Section 2: Other conditions Yes No

Regular travel throughout the Warwickshire policing area X

Politically Restricted post X

Warranted powers X

Uniform X

Section 3: Health and Safety Risk factors Yes No

Frequent Physical Effort required (give brief details).

X

Exposure to disturbing/unpleasant images or tasks (give brief details).

X

Unpleasant Working Conditions (give brief details).

X

Information Security and Assurance Advisor April 2021

Medical examination X

Hearing test X

Eye sight test X

Night worker X

Lone working X

Section 4: Security Level Yes No

Counter Terrorist Check (CTC) X

Management Vetting (MV) X