Security Incident Response Officer

The Defra Group Security function within DDTS is recruiting a Security Incident Response Officer.

The Security Incident Response Management Team is a growing team where you will have an opportunity to shape the role and make it your own.

The purpose of the Security Incident Response Officer is to triage and respond to security related incidents affecting the Defra group, including supporting the coordination of the response, escalating where appropriate and functioning as a conduit for information to the Senior Security Incident Response Officer or to the Head of the Security Incident Response Management team. The role involves managing both volume security incidents as well as coordinating incidents with no clear guidance across the physical, personnel, information, and cyber security. There will be line management responsibilities as part of this role. No prior cyber security knowledge is needed.

Limited travel and over nights stays are also expected. The successful candidate will either hold SC clearance or will be required to obtain SC clearance prior to commencement of the role.

Responsibilities

• Developing Standard Operating Procedures with key stakeholders, creating a contacts database for use in a response, feeding into the incident management playbooks and response plan.
• Supporting the response to major incidents, including assimilating available information, providing clear summaries to SEO and G7, and running the logistics of the response (such as setting up calls, taking minutes of meetings, drafting dissemination/notification emails).
• Ensuring a high level of customer service for both DDTS/Defra and wider government departments.
• Supporting investigations into security incidents, including creating and compiling evidence and providing clear recommendations to SEOs and G7 in the team.
• Triaging incidents, including monitoring an inbox where necessary - applying a clear understanding of team scope and structure to ensure requests, incidents and other communications are dealt with appropriately.
• Capturing all appropriate information to effectively triage requests and incidents, including establishing whether incidents have Data Protection implications, and log incidents appropriately.

Skills and Experience

• Comfortable working in an environment that can fluctuate between fast-paced and steady state, balancing long-term projects with short-term, high-energy responses.
• Experience supporting investigations and delivering responses, able to deliver quality products at pace, communicate effectively and work as part of a geographically disparate team.
• Ability to build strong relationships with a variety of stakeholders, often with conflicting priorities.
• Strong verbal and written communication skills.

Job Types: Full-time, Permanent

Salary: £30,317.00-£36,606.00 per year

Benefits:

• Additional leave
• Casual dress
• Cycle to work scheme
• Flexitime
• Sick pay
• Work from home

Schedule:

• Flexitime

Work Location: Hybrid remote in York, YO1 7PX

Reference ID: 266816