Deputy Head of Information Security

Salary: Full time starting salary is normally in the range £56,021 to £64,914 with potential progression once in post to £84,644

Role Summary

The Deputy Head of Information Security is a key leadership position within the IT Services department. This role is responsible for supporting the Head of Information Security in developing, implementing, and managing the University's information security strategy; drives the University’s information security posture using a risk-based approach; and takes a comprehensive approach to information security.

The Deputy Head of Information Security will collaborate with various departments across the University, managing the information and technology risk to the University’s IT facilities and information from internal and external threats; advises the University at a strategic level on existing and emerging threats; and develops the necessary IT security policies, standards, and procedures.

We would like to draw to your attention that this role is based on-site at the University of Birmingham. Whilst the University operates discretionary hybrid working arrangements for some staff, this is not guaranteed in the future. This role is not a remote position, and that on-site attendance will be required to fulfil your duties, including where needed at short notice.

Required Knowledge, Skills, Qualifications, Experience

Summary (full details provided in the full job description)

• Educated to degree level (or equivalent qualifications) in Information Security, Computer Science, or Business plus substantial work experience in a relevant technical and/or management/supervisory role in a specialist area.
• Substantial experience as an information security professional – especially in the area of information security strategy, governance, information security policy creation and maintenance and information security monitoring and compliance.
• Formal certification (CISSP or CISM) and formal training in information security standards and best practice. This will include experience implementing and/or maintaining formal best practice information security compliance or certification (e.g. ISO 27001/2, NIST CSF, Cyber Essentials, PCI DSS).
• A proven track record of creating and maintaining an information security service and developing, maintaining, implementing, and enforcing information security policy in a large institution or organisation. Experience in having dealt successfully with information security incidents.
• Experience of evaluating, creating, managing, and providing information security training.
• Demonstrated ability to operate within a secure environment on sensitive data, data request and information security incidents against strict information security policies.
• Demonstrated ability and experience in establishing, tracking, measuring, and weighing information security risk.
• Demonstrated ability to build relationships at different levels of the organisation including the capability of working with and earning the respect of senior customer stakeholders.
• Excellent presentation skills and the ability to create persuasive and accessible presentations to non-specialist staff at many levels of the organisation.
• Experience of building and managing teams, including senior level responsibility for HR and financial management at divisional level.
• Experience of working with information security suppliers, both in procurement and delivery of services.

Informal enquiries can be made to Tim Lucas t.lucas@bham.ac.uk or Nigel Gildea n.gildea@bham.ac.uk

To download the full job description and details of this position and submit an electronic application online please click on the 'Apply' button above.

Valuing excellence, sustaining investment
We value diversity and inclusion at the University of Birmingham and welcome applications from all sections of the community and are open to discussions around all forms of flexible working.

Closes: 24^th September 2024

Advert information