91755 - Security Risk and Assurance Practitioner

Salary   The national salary range is £32,827 - £35,678, London salary range is £37,174 - £40,403. Your salary will be dependent on your base location Number of jobs available   2 Detail of reserve list   12 Months Region   National City/Town   National Building/Site   NATIONAL Please note: Some of our MoJ Office locations, such as our Liverpool Justice Collaboration Centre, require higher levels of National Security Vetting. The MoJ is working to open more Justice Collaboration Centres and Justice Satellite Offices over time. Click here to learn more about where our currently open Justice Collaboration Centres and Justice Satellite Offices are, to identify where you may be based and understand National Security Vetting requirements of each location. Grade   HEO Organisation Grade for MoJ   HEO Post Type   Permanent Working Pattern   Full Time Role Type   Information Technology, Security Will the successful applicant have line manager responsibilities?   No Job description  

Security Risk and Assurance Practitioner (HEO)

The MoJ Information Security Team sits at the heart of the Ministry of Justice, enabling good security practices through the provision of security policies, guidance and education, by understanding cyber security risks from all parts of the Ministry of Justice and providing assurance to the departmental SIRO, the Permanent Secretary and other senior stakeholders that these risks are being effectively managed in the delivery of MoJ objectives.

The role of the Security Risk and Assurance Practitioner is to support the central MoJ Information Security Team in carrying out cyber security assurance, highlighting non-compliance with required standards and raise and communicate cyber security risks arising from control gaps.  

The Security Risk and Assurance Practitioner may also provide advice to others on good risk management practices to enable them to manage residual risk well, identify trends resulting from risk and assurance activities and use these to propose and deliver improvements to processes, policies and guidance, and enable senior team members to resolve tactical requests to the team.

All members of the team are expected to help develop the MoJ Security Function as a centre of excellence for the department and to contribute to building a brilliant and diverse team that is a welcoming place for all.

Typical role expectations and responsibilities

Manage the implementation and delivery of security assurance processes, including GovAssure and supplier assurance activities. Communicate assessment and assurance outcomes to stakeholders in ways that support effective security, risk management and decision-making, and advise stakeholders on their approach to risk assessment in the context of their business outcomes.

Work with Justice Digital and Information Assurance colleagues, or third party suppliers, to gather evidence of the performance of technical services and organisational processes against security baselines, controls and requirements, using key performance indicators.

Provide an informed opinion on Cyber Security risks and the adequacy of controls in place, with a focus on business critical services, based on the outcomes of evidence gathered.

Align risk decisions and advice with relevant regulation, policy and standards to provide proportional, practical advice that is tailored to the local environment, and advise on any residual risk. Understand when risks need to be escalated to more senior stakeholders and take responsibility for doing this.

Contribute to the development and enablement of security policy and security culture by collaborating with the Security Policy, Culture, Awareness and Education team, providing insight on the trends identified from security assurance activities. Assure the ongoing appropriateness of policy in accordance with regulation and wider departmental and government policies. Support risk-related work and enable compliance and governance.

Support and take part in building the network of security partners across government and national technical authorities, and within industry.

Contribute to submissions and reports for senior MoJ officials and su