Information Security Officer (to June 2017)

Tender description

Who Speclialist Work With The specalist will be the only Information Security Professional in the organisation and will need to work closely with the IT Infrastructure and Support Teams to ensure compliance. What Specialists Work On Providing temporary Information Security and accreditation expertise and support until permanent recruitment completed. Ensuring HCA remains compliant with ISO27001 and Security Policy Framework particularly for Gateshead and Warrington Data Centres. Arranging Pen tests. Monitor and record key metrics including cyber attacks, equipment loss, unusual staff internet access. Produce monthly Information Security Report. Ensure completion of BPSS for new non-staff workforce and necessary SC/CTC checks for other staff. Plan the 2017/18 ISMS system and process audits in agreement with the ISMS Management Team, and carry out first quarterly 2017/18 audit. Hand over smoothly to permanent role once they are in post. Where the Work Takes Place The worker can generally choose where they work, however the team uses our Gateshead office as a connection point, and there is an expectation that the worker will use this office for project related activities that need their attendance in person. Early Market Engagement Working Arrangements The worker will manage their own working arrangements as required to deliver the assignment. For reasons of security, the HCA will provide encrypted laptop loaded with secure software. Work Location The worker can generally choose where they work, however the team uses our Gateshead office as a connection point, and there is an expectation that the worker will use this office for project related activities that need their attendance in person. Security Clearance All team members are subject to Baseline Personnel Security Standards checks and for anyone working at the London office, must also be CTC cleared. Additional T&Cs Skills & Experience Public Sector Information Security Background Detailed knowledge of ISO27001 Experience of ensuring security of the PSN, email, virus protection and Disaster Recovery A mix of management and technical skills CISSP Qualified Nice to Haves No. of Specialists to Evaluate 3 Cultural Fit Criteria Work as part of a team with our organisation and other suppliers Transparent and collaborative when making decisions Flexible to changing requirements and needs Open to suggestions and open to make suggestions Driven for success with positive and professional attitude Assessment Method Evaluation Weighting Technical competence 40% Cultural fit 20% Price 40% Questions from Suppliers Budget range £450