Information Security Officer (ALSPAC)

What will you be doing?

• Support the senior team in the implementation, maintenance and ongoing development of ALSPAC’s Information Security Management System (ISMS), which is certified to the internationally recognised ISO/IEC 27001 standard.
• Be responsible for the day-to-day administration of the ISMS and supporting ALSPAC’s continued ISO/IEC 27001 certification.
• Assist with the development and review of policies, procedures and guidance;
• Provide advice and training to staff;
• Schedule and undertake internal audits and spot checks;
• Draft information security reports;
• Support the annual management review of the ISMS.
• Work closely with the Senior Information Risk Owners (SIROs) to support the annual continuing assessment and the three-year recertification audit process.
• Keep up to date with emerging cyber security and information governance risks relevant to ALSPAC, escalating issues to senior colleagues in a timely manner where appropriate.

Requirements

You should apply if You Possess The Following:

• Excellent organisational, prioritization, time-management skills and problem-solving skills;
• A broad understanding of information security principles, data protection legislation and recognised best practice, particularly the Data Protection Act 2018;
• Strong IT and computer literacy skills;
• Self-motivated and able to work independently with minimal supervision;
• Experience of drafting policies, procedures and standard operating procedures;
• Can remain calm and effective when managing competing priorities or responding to issues;
• Educated to degree level, or have equivalent professional or practical experience.