STRAP Security Officer

To be successful in this role, the ability to manage your own workload and to present findings to a high standard are a must. This is a crucial and influential role requiring excellent negotiating and analysis skills and the ability to communicate with all key stake holders at all levels of seniority.  Some of the key skills and experience you'll bring:  

• Understanding of the STRAP Supplement and Cabinet Office Security Policy Framework, with proven knowledge of the processes, tools and techniques required.
• Knowledge of the processes, tools and techniques of information security management, ability to deploy and monitor information security systems, as well as detect, resolve and prevent violations of IT security, to protect organisational data.
• Basic knowledge of concepts, tools and practices of dealing with computer crime; ability to detect and prevent business crimes that involve computers/networks as instruments.
• Knowledge of risk management skills, tools, techniques, approaches and processes of security risk management; ability to mitigate the risk of malicious insiders posing a security threat through the deployment of protective monitoring solutions.Supervise management of risks and issues to ensure delivery of operational and organisation objectives.
• Knowledge of IT security policies, standards, and procedures; ability to utilise a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
• Knowledge of IT security policies, standards, and procedures; ability to utilise a variety of administrative skill sets and technical knowledge to ensure security compliance.
• Knowledge of technologies and technology-based solutions dealing with security issues; ability to apply these in protecting information security across the organisation.
• Knowledge of technologies, methods and tools of forensics investigations for IT security violations or potential threats; ability to identify, uncover and evaluate violations, warning reports, suspected incidents and insidious events.
• Knowledge of and the ability to utilise tools and techniques for assessing the effectiveness of security measures, identifying potential risk exposures, and protecting the availability, confidentiality and audit trails of information from destruction or manipulation.
• Knowledge of and the ability to protect information and information systems while ensuring their confidentiality, integrity and availability.
• Knowledge and ability to develop and maintain effective working relationships with internal and external stakeholders in order to foster collaborative working.

Why you should apply

We value the different experiences our people bring to their work at NHS Digital. We're working to create an environment where everyone can make a full contribution no matter their background, identity, or circumstances.

Which means, we encourage applications from people of all backgrounds and abilities.  Don't worry if you don’t meet all the criteria we’ve suggested – knowledge and experience you've gained in other ways might make us think about the role differently. Go ahead and apply.

Our work matters. You matter.

What we offer you:

• we're moving to a hybrid working approach which offers you an informal, flexible way of blending home and office working
• flexible working opportunities - we value and respect the diversity of our employees, and applications from prospective candidates who require flexible working arrangements are welcomed; these include part-time hours, job sharing, flexible hours and part-remote set ups
• 27 days annual leave increasing to 33 days with service
• ability to buy and sell annual leave  
• a generous pension (with our contribution equal to 20.6% of your earnings)
• NHS Discounts including shops, restaurants, gym, mobile phones, and insurance
• employee benefit schemes including our Season Ticket Loan, Car Lease and Bike to Work schemes

Next steps

Remote interviews will take place via Microsoft Teams. Applicants who are shortlisted for interview will be contacted by email.

To view further information please see the attached role profile.