Description
Information Security Assurance Manager
Role Summary
We have an exciting new contract opportunity based in Portsmouth as a Information Security Assurance Manager.
The role will be an initial 7 month contract and will provide you with the opportunity to work across all branches of security functions and external supplier site locations, supporting the delivery and application of security in support of Programme delivery.
Key Responsibilities
- Ensuring demonstrable compliance with the requirements of the Defence Cyber Protection Partnership and generating Security Aspects Letters in line with HMG Policy
- Overseeing security tasks and coordinating information security supplier assurance team services and audit based on relevant policies, standards, procedures and best practices of the assigned work stream(s).
- Ensuring demonstrable compliance with defence industry contractual security requirements, not limited to; the Defence Federal Acquisition Regulation Supplement (DFARS), NATO and OCCAR
- Managing security incidents in conjunction with Information Security team, including the investigation of incidents and remedial action
- Influence the security culture by raising security awareness amongst employees, management and suppliers, modelling behaviours that demonstrate BAE Systems values.
- Generate a business network appropriate to specific role requirements and maintaining positive relationships to ensure information security is at the forefront of business decisions
- Creating a positive security culture through the design and delivery of information security training and awareness across the Maritime Services business in accordance with the information security programme
- Authoritative communication of security assurance aspects as appropriate to programmes, partners and suppliers and engender continuous improvement to embed an effective security culture
- Conduct and review security assessments and define operational requirements for the assigned work stream to protect critical information assets.
- Lead information security risk assessments and track remedial activities through to resolution to improve information security performance
- The Analysis of Information Security Requirements and the assessment of compliance with these requirements, developing action plans to address identified non-compliances
- Providing security guidance on new supplier and evaluations for the supply base, including guidance on classification of both BAE Systems proprietary and government security classified information.
- Authoritative communication of security aspects and effective management of the information security supplier assurance team as appropriate to support programmes, partners and suppliers and engender continuous improvement to embed an effective security culture.
- Proactive engagement with commercial and bid teams to ensure appropriate security planning is managed to reflect regulatory, contractual and policy requirements for supplier downs.
Key skills & qualifications
- Relevant degree or demonstable experience in Security or Supply Chain related subject.
- Industry recognized Information Security, Supply Chain or audit Qualification is highly desirable.
- Two years experience in a similar role.
- Demonstrable knowledge and experience of Information Security principles and processes (ISO, NIST)
- Demonstrable knowledge and experience of Supply Chain principles and processes.
- Working towards Information Security or Supply Chain qualification eg MSc, CISM, CISSP, CIPS is highly desirable.
- Demonstrate good oral and written communication skills; able to communicate effectively.
- Experience within UK Defence industry and associated security frameworks is highly desirable
- Knowledge and understanding of UK Government Security Classifications
What we're looking for in you
Excellent verbal and written communication skills.
Well-developed analytical/problem solving/decision making skills.
Strong organisational skills who is adaptable in a fast-paced environment.
Stakeholder management skills.
Location: Portsmouth
Rate: £48.70 per hour - INSIDE OF IR35
AAP3 is acting as an Employment Business in relation to this vacancy.