Senior Information Security Officer

As well as the exciting opportunities this role presents, we also offer some great benefits some of which are below:

• 41 Days holiday (27 days annual leave 8 bank holiday and 6 closure days)
• Additional 5 days' annual leave purchase scheme
• Defined benefit career average revalued earnings pension scheme (CARE)
• Cycle to work scheme and season ticket loan
• Immigration loan
• Relocation scheme for certain posts
• On-Site nursery
• On-site gym
• Enhanced maternity, paternity and adoption pay
• Employee assistance programme: Staff Support Service
• Discounted medical insurance

Visit https://www.ucl.ac.uk/work-at-ucl/rewards-and-benefits to find out more.

Within ISD, this post is in the Chief Information Security Office (CISO) which leads on all aspects of security at UCL. CISO is divided into two teams covering Security Operations and Governance, Risk and Compliance (GRC).

You will work closely with stakeholders across UCL to provide expert advice on information security matters, support risk assessments and assurance activities, lead the development and improvement of policies and standards, and promote compliance with UCL's security framework in a pragmatic and solution-oriented manner. The role also includes providing leadership on GRC initiatives, mentoring colleagues, and helping to shape and strengthen UCL's overall security posture.

As the ideal candidate you will have a mix of the following skills and experience:

• Experience operating as part of an Information Security or Governance, Risk and Compliance team, providing advice, support and services to a wide range of stakeholders.
• Experience leading or contributing to security risk assessments, assurance reviews, audits, compliance activities or security governance initiatives.
• Strong knowledge of information security governance, risk management and compliance principles, with the ability to apply risk-based thinking to complex situations.
• Experience developing, reviewing or implementing information security policies, standards, guidance or frameworks.
• Excellent written and verbal communication skills, with experience producing reports and presenting information to both technical and non-technical audiences.
• Experience building effective relationships with stakeholders at all levels and providing pragmatic, customer-focused security advice.
• Relevant degree or equivalent professional qualifications and experience.