Security Compliance Officer

Summary of what the candidate must have to apply:

• Relevant ICT security qualification, or training and experience using tools or services from at least two security vendors.
• Extensive network security experience, including monitoring, firewalls and intrusion detection in a complex, multi-site environment.
• Strong knowledge of ITIL, ISO 27001/27002, data protection legislation and security incident investigation.

The role: Manage security monitoring, patching compliance and risk reporting across the Council’s infrastructure. Investigate security incidents, advise on secure technical designs and support audits, disaster recovery and business continuity.

Key accountabilities:

• Monitor patching, infrastructure performance and security compliance, producing clear risk and customer reports.
• Lead technical investigations into incidents and breaches, preserve evidence and brief senior security stakeholders.
• Advise projects and technical authorities on network security, monitoring, audits, disaster recovery and business continuity.

Requirements/key criteria:

• Security qualification or proven experience using security software, hardware or services from at least two vendors.
• Extensive networking, perimeter security and monitoring experience within a large, regulated, ITIL-aligned organisation.
• Knowledge of ISO 27001/27002, ITIL, PRINCE2, UK GDPR and the Data Protection Act.
• Strong reporting, documentation and stakeholder-management skills.
• Availability for occasional evening or weekend work.

How to Apply

• Quote the Job Title and Reference Number in your application.
• Submit your CV in Word format.
• Applications are reviewed on a rolling basis—early submission is recommended.

We will also add your details to our mail out lists. Please note you may receive details of roles outside of your immediate vicinity, as many candidates are able to relocate temporarily for work. Please disregard any such emails that are not of interest and let us know if you would rather not receive such mailouts and/or if you wish us to delete your details and prefer to apply direct to our advertised roles.

If you do not hear from us within three working days, unfortunately your application has not been shortlisted on this occasion. Thank you for your interest in working with us.

Qualification details and any other experience/skills relevant to the role to help support your application should be clearly shown in your CV.