Scot Gov Jobs – Head of Cyber Security & Risk In London

Overview

Position Title:

Company:The Scottish Government

Location:London, UK

Job Description:

Around 1,300 people work within ARE, and we are about to embark on the biggest transformation in our history. We have a mission to not only sustain the rural economy, but drive better land use, and ensure that food production, quality and availability is maintained. EU Common Agriculture Policy (CAP) payments are ending and ARE is responsible for administering new rural support schemes in a just transition over the next 3-4 years. A critical part of this will be the use of digital tools to drive new incentives, funding options and behaviours amongst our agriculture customer and land managers.

This focus on digital transformation will increasingly see the use of cutting-edge tools such as satellite and geospatial technology, IOT and 5G, and new customer facing digital services and platforms that put data at the heart of our digital services. We will be reducing our reliance on proprietary technology, reducing technical debt, favouring open source where appropriate and leveraging the benefits of public cloud offerings.

Responsibilities:

• Act as the key point of contact to a wide range of internal and external stakeholder including
• NCSC, iTECS, other UK paying agencies for all cyber security related matters.
  strategy.
• Work proactively across the business to engage and advise as part of a new cyber
• Challenge the team and wider stakeholders at all levels, as a role model, champion and thought leader.
• Implement the first iteration of tooling and new AWS cloud services with key vendors.
• Design a new target operating model and assess skills and capability gaps within the team and wider security organisation.
• Establish a market leading security operations centre (SOC).
• Act as key point of contact for all cyber matters on behalf of ARE and network proactively across
• Scottish Government and wider public sector colleagues.
• Fully analyse our existing cyber framework and the needs of the organisation, ensuring adherence to established and relevant security frameworks and standards.
• Set the vision and agenda, driving the team to objectives that will deliver a higher standard of performance and delivery.
• Establish new incident and event management processes.