Senior Information Security Manager
| Posting date: | 16 June 2025 |
|---|---|
| Salary: | £48,720 to £52,130 per year |
| Additional salary information: | This post is eligible for DDaT Recruitment Retention Allowance (RRA) of up to £8,300. |
| Hours: | Full time |
| Closing date: | 29 June 2025 |
| Location: | Croydon |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 410368/1 |
Summary
Home Office Digital, Data and Technology designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.
Within DDaT, the Data Services and Analytics (DSA) team find innovative uses for Home Office data and contains one of the most advanced data analytics centres in Government. We strive to lead the way in appropriate and proportionate use of data and analytics to deliver joined-up, intelligent services that unlock the value from data and improve decision making, policy and operations.
Data Services and Analytics consist of technical and non-technical professionals from a wide variety of backgrounds, we are the hub of data expertise within the department. We support our teams with structured learning, both formal and on-the-job, mentoring and feedback.
By joining Data Services and Analytics now, you can help drive forward our aim to become recognised as the leading provider of data insight services in Government.
As a Senior Information Security Manager, you will develop security, risk management and compliance procedures. This will include the investigation of major breaches of security and the development of information security policies and procedures.
You will lead the auditing regime of critical national infrastructure services and ensure all access to data held on national systems is conducted in accordance with policies and procedures. You will initiate security audit and investigation into internal unauthorised activity on national systems and services.
You will be able to understand core technical concepts related to the role and work under guidance to apply them. By seeing the bigger picture, you will be able to investigate how to get the best out of core services.
You will work closely with a number of teams within DDaT and wider Home Office to ensure all information security policies and procedures are understood and adhered to, in line with best practice standards.
Your main day to day responsibilities will include:
- Conducting reviews of and creating security policy documentation, including drafting procedures, processes and security notices, to ensure that requirements from governance, such as the Risk Management and Accreditation Document Set, are reflected.
- Overseeing the audit process, analysing audit data in order to make recommendations on how we can ensure information conforms to processes, procedures and regulations.
- Communicating effectively with relevant teams and stakeholders to ensure they recognise the importance of security considerations and respond accordingly to changes in policy and procedure.
- Initiating and overseeing internal investigations into activities on systems and services and ensuring that these are conducted with utmost integrity.
- Working on remedial solutions and ensuring resolution activities are carried out through liaising with the appropriate stakeholders.
- Working with technical teams to support the continuous monitoring of designated systems and networks and the recording of security events and incidents to highlight system and network errors and support investigations.
You will also be expected to carry out the following day to day activities: - Identifying process optimisation opportunities and working on the implementation of proposed solutions.
- Driving the collection of statistical information relating to systems security incidents and identified vulnerabilities to produce reports for senior stakeholders.
- Mentoring junior members of the team to ensure that they are up to speed with Home Office and security principles and developing in line with Home Office values.
- Scoping work for and advising suppliers and security consultants employed to conduct third party risk and threat assessments, ensuring SLAs are met.
- Providing ad hoc support/consultancy to IT teams by answering general enquiries about information security requirements.
- Participating, contributing to and supporting collaboration initiatives and career development within the IT Operations community, building in-house capability via a professional community of practice.
Working Pattern
This role is available on a full-time basis with the option of compressed hours working, due to the business requirements of the role.
Travel
Occasional travel within the UK may be required. Travel costs incurred for business need, will be reimbursed in line with Home Office travel policy.
Proud member of the Disability Confident employer scheme