Cyber Compliance Support Officer

Job title – Cyber Compliance Support Officer

Profession–  Cyber & Security

Directorate – Data Analytics & Surveillance

Full Time equivalent – 37.5 hours

No of Roles – 1

Contract Type – Permanent

Location – Home working (This is a remote role currently but there may be some occasional travel for team meetings)

UKHSA offers hybrid working or home working for its employees – this means that whilst the role will be based in one of our UKHSA offices, there will be opportunities for an element of working from home. The balance between home and workplace working is to be agreed with the line manager, determined primarily by business need and in line with departmental policy. Some business travel will be required to other UKHSA offices. Please be aware that this role can only be worked from within the UK and not overseas. Relocation expenses are not available

Working Pattern – Full Time / Part Time / Job Share / Flexible Working / Hybrid Working

Grade & Salary – Grade EO. National banding -£25,976- £30,264 per annum. Inner London – £29,737- £34,453 per annum. Outer London -£27,722- £32,505 per annum.

New entrants to the Civil Service are expected to start on the minimum of the pay band.

The internal roles rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest.

For further details please refer to the Information Sheet- Starting Salaries & Benefits attachment

This role is to be appointed under Civil Service Terms & Conditions. Full details on the T&C’s are found https://www.ukhsa.reed.com/.

Closing Date – 15/10/2023. 23:55pm. Unfortunately, late applications will not be considered

Interview Date  W/C  23/10/2023 Please note, these dates are subject to change.

Job Overview

At the United Kingdom Health Security Agency (UKHSA) our mission is to provide health security for the nation by protecting from infectious disease and external hazards.  We are a trusted source of advice to government and to the public, focusing on reducing inequalities in the way different communities experience and are impacted by infectious disease, environmental hazards, and other threats to health.

Our mission is challenging, innovative and in the spotlight. We will work to ensure our people have the diverse skills, experiences, and backgrounds we need to thrive, that our employees are representative of the communities we serve and feel valued and enabled to play their part in delivering our work.

Creating our working culture is an ongoing process which we are developing by listening and learning together, hearing and acting upon diverse voices and opinions to develop a common sense of identity and effective ways of working.

As part of its development and governance UKHSA is expanding the Cyber Security Division,  building on its capability to provide a critical function in the protection of the UKHSAs digital assets, working closely with wider UKHSA security teams  and stakeholders (Government Security Group, NCSC and CPNI) to build a resilient infrastructure, supporting the organisation in reaching its ambition to become a global leader for health security and becomes a critical component of our national security infrastructure.

This is an exciting opportunity to join the division as a central part of a specialist Cyber Compliance team performing a pivotal and demanding role responsible for the provision of management oversight of cyber compliance covering areas such as DSPT, PCI-DSS, NIST, HMG security compliance and external bodies.

In this role you will support the team in the daily management of its various activities and provide support to the wider Cyber Risk and Assurance team, helping to drive the performance and continuous improvement

The post holder will support the team in the management of compliance schedule, arranging meetings and undertaking internal team compliance and audit checks.  

They’ll also support the team in the generation of management information, act as the first point of contact for generic queries and maintain the intranet pages and guidance documentation.

This is a challenging role where you will be expected to:

• Weekly monitoring of the audit schedules and associated task to ensure audits/compliance are progressing to plan
• Undertake audit checks and assist with compliance activities
• Maintain the CIS controls matrix and reporting
• Undertaking file management and compliance checks for the team.
• Maintain the team Information Asset Register
• Monitor the actions emerging from audit schedules
• Act as the first point of contact managing the mailbox queries and diary management
• Support the identification of key reporting and management information
• Work with the wider team on the coordination of the penetration testing process
• On occasion, deputise for the Cyber Compliance Officer

Essential skills:

The successful candidate will be expected to demonstrate:

• Excellent attention to detail and ability to use own initiative
• Organisation and planning skills, working to the outcomes required and prioritising as relevant
• Analytical skills to manage multiple datasets utilising MS tools and applications.
• Strong communication skills to build relationships and networks across the UKHSA compliance functions and Cyber Security function
• Ability to cope with changing priorities and processes
• Ability to translate technical information into clear language for non-technical audiences

Desirable Skills:

Ideally you will also have the following skills or some experience in:

• Experience/knowledge of information security/cyber security
• Experience of working in a service delivery/project programme office environment
• Experience within an audit/compliance environment
• Knowledge of compliance frameworks such as PCI-DSS/DSPT

We pride ourselves as being an employer of choice, where Everyone Matters promoting equality opportunity to actively encourage applications from everyone, including groups currently underrepresented in our workforce.

UKHSA ethos is to be an inclusive organisation for all our staff and stakeholders. To create, nurture and sustain an inclusive culture, where differences drive innovative solutions to meet the needs of our workforce and wider communities. We do this through celebrating and protecting differences by removing barriers and promoting equity and equality of opportunity for all.

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an average employer contribution of 27%

Job contact :

• Name : sophie rigney
• Email : sophie.rigney@reed.com

Recruitment team

• Email : hradmin@phe.gov.uk