CON-18-103 – Manager – Strategy, Governance & Capability, Cyber & Information Resilience

Tender description

Who Speclialist Work With The candidate will be leading and working with a small team responsible for delivering the strategy, governance and capability agenda. What Specialists Work On • Definition, development and maintenance of the Cyber and Information Resilience Strategy for the FCA, and associated policies, procedures, standards and implementation roadmaps. • Promote the FCA’s Cyber and Information Resilience strategy internally and drive the awareness of cyber security risks, data privacy obligations and good information management practices. • Drive the FCA’s behavioural change agenda to establish a robust information security and privacy culture across the organisation. • Define, implement and drive the compliance regime to ensure that the updated security policies and standards are being embedded. Where the Work Takes Place 12 Endeavour Square, London, E20 1JN Early Market Engagement Working Arrangements The specialist will be expected to work on-site 5 days a week, though flexible working arrangements (including working from home) can be discussed. Work Location 12 Endeavour Square, London, E20 1JN Security Clearance None required. Additional T&Cs In addition to the employer's statutory requirements, the individual must be subject to following checks prior to the commencement of the engagement: 1. A check on the financial history of the individual using reputable services such as Experian or Equifax. 2. Verification of employment or academic references covering the last five years or a lesser period as appropriate in the individual’s circumstances but covering a minimum of 3 years. Skills & Experience Experienced in the selection and implementation of appropriate security controls and governance strategy across the financial services sector or regulatory environment. In-depth knowledge of Information Security Risk Management principles with demonstrative practical experience of supporting security risk frameworks within a complex organisation. Demonstrable experience in the creation of high quality information security policy frameworks, including the definition, roll-out and maintenance of policies, standards and practices that are suitable for the FCA. Knowledgeable about the legal and regulatory requirements for information security and information management. Experience of developing and operating information security strategies and governance frameworks Experience of developing information security policies and standards Experience of information security controls, vulnerabilities and threats to be able to effectively assess information security risks. Experience of applying ISO 27000 and/or NIST security standards in order to ensure an effective, integrated approach to information security controls for mitigation of information security risks to the business. Nice to Haves Knowledge of Information Management principles. Knowledge of data privacy regulation, including the new EU General Data Protection Regulations. Experience in leading the delivery of security awareness and culture change. Professional Accreditations (CISM, CISA, CISSP, M Inst ISP). No. of Specialists to Evaluate 6 Cultural Fit Criteria Resourceful - delivering the greatest public value for our money Public first - putting the public's needs first Informed - we always know what we're talking about when we talk about consumers and markets Open and honest - we say exactly what we'll do - and then do it Courageous - stand up for what is right not what is easy, even under pressure Accountable - we take responsibility for our decisions and actions Fast and fair - staying focused, keeping things simple and delivering at pace Challenging - using our judgement to challenge and change the status quo Forward thinking - actively anticipating and preparing for the future Keep an open mind - always be objective and fair, put your preconceptions in a box Get the full picture - actively seek the input of others with different experiences Be a good colleague - being caring, helpful, supportive and challenging so we can work at our best Forge productive links - create collaborative relationships across and outside the FCA Join things up - seek ways to share knowledge and integrate work Support and challenge - stay focused on our priorities and support each other when under pressure Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range £1500 (ex. vat)