CISO - Chief Information Security Officer (GDS)

CISO

Certes Ref: 81617

Status: Inside IR35

Daily rate: £1100

Length of contract: 12 months

Location: Hybrid: 1 to 2 days in the office required (London, Manchester, Bristol)

Clearance: Active SC Clearance required

Experienced CISO required for our Central Government Client to come on board and design and implement the Cyber Security Strategy. You will be working on some of the most high profile citizen facing services, using the latest technologies, with the opportunity to continue the cyber transformation.

What you’ll do:

• Completing the definition and implementation of the cyber security strategy, fully forming our risk and governance processes
• Ensuring that our threat identification and intelligence collection; vulnerability management; protective and transactional monitoring, incident response processes and cyber risk management are fit for purpose.
• Helping our portfolio of programmes deliver to meet the required internal and external policy & standards (considering our customer needs), with Security by Design at the core
• Leading our community of security experts - as well as advocating for them to support security backlog prioritisation
• Managing relationships with internal and external stakeholders and partners to ensure effective security operations.
• Collaborating with other executives, business units, and stakeholders to ensure alignment of security policies and procedures with business objectives

Who you are:

• Have an understanding of best practice for Governance, Risk and Compliance (GRC) within Information Security and risk management, which could include knowledge of relevant standards such as ISO/IEC 27001, PCI-DSS and NIST CSF. However the primary reference point for the organisation will be the NCSC’s Cyber Assessment Framework.
• Demonstrate a depth of experience around cyber operations including vulnerability management, endpoint protection, firewalls, IDS/IPS, Identity and access management, SIEM and SOC.
• Have significant experience of embedding cyber security approaches within the Software Development Life Cycle.

Certes IT Service Solutions welcome applications from all sections of the community and from people with diverse experience and backgrounds.