Job Title: Operational Resilience Manager Location: London Type: Full-Time About the Company: We are proud to partner with a leading Financial Services provider that focuses on delivering exceptional solutions to UK businesses. Specializing in niche areas such as Wholesale Finance, Asset Finance, Bridging Finance, Development Finance, and Specialist Mortgages, this organization is committed to helping businesses thrive. They also offer savings accounts, ensuring customers' money supports the growth of the British economy. Join a company dedicated to excellence, integrity, and customer-centric outcomes. About the Role: As an Operational Resilience Specialist , you will play a critical role within the Enterprise Risk team. This new 2nd line function focuses on Financial Risk, Operational Risk & Resilience, and enterprise-wide risk management frameworks. You will oversee and provide assurance for operational resilience, including third-party risk management, business incident management, business continuity planning, IT disaster recovery, and cybersecurity. Your work will ensure the successful implementation of regulatory requirements, fostering a culture of risk awareness and resilience throughout the organization. Key Responsibilities: Provide independent challenge to the 1st Line Operational Resilience team, ensuring adherence to regulatory requirements. Support the successful implementation of the Operational Resilience plan by March 2025 and drive its continued integration across the organization. Maintain and update Operational Resilience and Third Party Risk Policies to ensure alignment with organizational requirements. Participate in forums related to Operational Resilience, Third Party Risk Management, and Cyber/IT governance as needed. Conduct risk-based thematic reviews of the 1st Line Operational Resilience and Third Party Risk Management (TPRM) function. Challenge business lines on risk management practices, including documentation in Risk Control Self-Assessments (RCSAs). Support Incident Management duties in collaboration with the Operational Risk Senior Manager. Stakeholder Relationships: Internal Contacts: Collaborate with teams including the Head of Enterprise Risk, Operational Risk Management, Compliance, IT Governance, and Cybersecurity. External Contacts: None specified. What We're Looking For: Qualifications and Experience: Proven experience interpreting and understanding regulatory guidelines. Strong understanding of operational risk and resilience concepts. Demonstrated ability to influence senior stakeholders to drive action. Exceptional written and presentation communication skills. Proficiency in Microsoft Office tools (eg, PowerPoint). Preferred Skills: Experience in business continuity or incident management is desirable but not essential. Key Competencies and Attributes: High interpersonal, influencing, and networking skills. Effective stakeholder management abilities. Resilience, self-awareness, and a strong willingness to learn and grow. A self-starter with professionalism and initiative. Organized, collaborative, and diligent. Risk Management Responsibilities: Promote and champion fair customer outcomes. Understand and comply with the organization's Risk Management Framework, policies, and procedures. Identify and escalate risks appropriately and in a timely manner.
Dec 05, 2024
Full time
Job Title: Operational Resilience Manager Location: London Type: Full-Time About the Company: We are proud to partner with a leading Financial Services provider that focuses on delivering exceptional solutions to UK businesses. Specializing in niche areas such as Wholesale Finance, Asset Finance, Bridging Finance, Development Finance, and Specialist Mortgages, this organization is committed to helping businesses thrive. They also offer savings accounts, ensuring customers' money supports the growth of the British economy. Join a company dedicated to excellence, integrity, and customer-centric outcomes. About the Role: As an Operational Resilience Specialist , you will play a critical role within the Enterprise Risk team. This new 2nd line function focuses on Financial Risk, Operational Risk & Resilience, and enterprise-wide risk management frameworks. You will oversee and provide assurance for operational resilience, including third-party risk management, business incident management, business continuity planning, IT disaster recovery, and cybersecurity. Your work will ensure the successful implementation of regulatory requirements, fostering a culture of risk awareness and resilience throughout the organization. Key Responsibilities: Provide independent challenge to the 1st Line Operational Resilience team, ensuring adherence to regulatory requirements. Support the successful implementation of the Operational Resilience plan by March 2025 and drive its continued integration across the organization. Maintain and update Operational Resilience and Third Party Risk Policies to ensure alignment with organizational requirements. Participate in forums related to Operational Resilience, Third Party Risk Management, and Cyber/IT governance as needed. Conduct risk-based thematic reviews of the 1st Line Operational Resilience and Third Party Risk Management (TPRM) function. Challenge business lines on risk management practices, including documentation in Risk Control Self-Assessments (RCSAs). Support Incident Management duties in collaboration with the Operational Risk Senior Manager. Stakeholder Relationships: Internal Contacts: Collaborate with teams including the Head of Enterprise Risk, Operational Risk Management, Compliance, IT Governance, and Cybersecurity. External Contacts: None specified. What We're Looking For: Qualifications and Experience: Proven experience interpreting and understanding regulatory guidelines. Strong understanding of operational risk and resilience concepts. Demonstrated ability to influence senior stakeholders to drive action. Exceptional written and presentation communication skills. Proficiency in Microsoft Office tools (eg, PowerPoint). Preferred Skills: Experience in business continuity or incident management is desirable but not essential. Key Competencies and Attributes: High interpersonal, influencing, and networking skills. Effective stakeholder management abilities. Resilience, self-awareness, and a strong willingness to learn and grow. A self-starter with professionalism and initiative. Organized, collaborative, and diligent. Risk Management Responsibilities: Promote and champion fair customer outcomes. Understand and comply with the organization's Risk Management Framework, policies, and procedures. Identify and escalate risks appropriately and in a timely manner.
We have been made aware of a global phishing campaign where employees from companies are being impersonated. We are confident that no PageGroup system has been breached. Find out how to protect yourself Head of Risk, Information, Security and Compliance Swindon Permanent The business is planning for significant growth and transformation. Hybrid working practices in place. About Our Client UKSBS is a leading public sector shared service centre, providing high-quality HR, Payroll, Finance, Procurement and IT services to our partners. Owned by the Department of Science, Innovation and Technology (DSIT), the Department for Energy Security and Net Zero (DESNZ), the Department of Business and Trade (DBT) and UK Research and Innovation (UKRI). We provide a range of efficient, scalable, and expert Finance, HR and Payroll, Procurement and Business IT services helping the advancement of the UK's economy and society. We are motivated by a desire to deliver high-quality, efficient and reliable service to over 25,000 civil and public servants, employed by our clients. As a public sector-owned shared service centre, UK SBS is motivated by a desire to deliver the highest possible quality of service to our partner organisations. We are proud to play our part in contributing to the success of our partners. We aspire to be the leading UK public sector business service provider, efficiently and securely managing multiple technology platforms and delivering a great end-user experience, underpinned by simple processes and cutting-edge IT. Our operating model will balance harnessing the value for money and efficiency offered by greater automation and self-service, with responsive and personal interactions for more complex needs. Our flexible approach will enable us to flexibly support a wide and changing range of partner requirements. We plan to welcome new public sector partners to our mutual ownership model which will ensure the best value for the public purse. Our people will continue to be at the heart of our company, supported by empowered leaders and enabled by an inclusive and diverse working culture. Job Description You will be working closely with the Executive team and our Chief Executive Officer (Senior Information Risk Owner) with the responsibility and accountability for leading an expert team to ensure UKSBS (people, systems, information and premises) have robust, proportionate and cost-effective: Information Security. Incident Management, Business Continuity and Disaster Recovery. Information Management and Data Protection. Risk Management, Internal Controls and Audit Programme coordination. Counter Fraud, including legal requirements under the Bribery Act. You will also act as the Departmental Security Advisor. Flexibility may be required to respond to the changing needs of the organisation and the service. You may also be asked to undertake ad hoc activities in support of the Chief Executive Officer and other Executives. Responsibilities will include: Work closely across the Executive and Senior Leadership Group to ensure alignment of RISC objectives with the UKSBS business plan and operational plan. Performance lead and develop the Risk, Information, Security and Compliance (RISC) team, ensuring that members have appropriate business exposure, are professionally competent and highly motivated. Has accountability for ensuring the team operates to budget. Provide coaching and mentoring support to management colleagues across the business. Represent the Risk, Information, Security and Compliance (RISC) function, as required, at the UKSBS Committees. Represent UKSBS, as required, at the UKSBS Audit Committee and key partnership/client meetings. Ensure UKSBS has a positive working relationship with GIAA. Maintain a strong network of Risk, Information, Security and Compliance (RISC) contacts across Government, the public sector and wider business. Provide strategic, tactical, and operational advice to Executive and Senior Management. Design and deliver an appropriate suite of Risk, Information, Security and Compliance (RISC) strategies, policies and processes, maintaining legal compliance and alignment with HM government best practices. Drive cultural alignment to agreed policies across the organisation. Gain agreement from Executive and Audit Committees to an annual Risk, Information, Security and Compliance (RISC) delivery plan. Act as the Security Advisor, coordinating the company response to security-related matters, including assessing and making judgements in relation to risk on behalf of the SIRO and Executive. Providing senior level guidance and support to the Information Manager and Data Protection Officer, Senior Information Security Manager, Information Security Manager and Risk and Assurance Manager ensuring coordination that supports delivery by Digital and Information, Operations, and Partnerships and Change. Ensure delivery of the UKSBS annual audit plan as agreed by the Audit Committee. Support and report progress to close reported audit findings. Oversee the development and testing of business continuity and resilience plans. Act as the professional adviser to Gold and Silver command in the event of a business continuity incident Ensure UKSBS' cyber security is maintained Ensure planning, delivery and reporting of an annual cycle of mandatory Risk, Information, Security and Compliance (RISC) training. Oversee the quality and timeliness of reporting, papers and reports for formal meetings and supporting communications material. Identify opportunities for control enhancements, service/quality improvements and operational efficiency. Act as Programme Lead / SRO for activities, as required, ensuring appropriate governance is maintained and dependencies to other programmes are addressed. Act as Project Manager for key projects when necessary. Identify, monitor and report business case benefits, and evidence success. The Successful Applicant A significant specialist background in Risk, Information Management, Business Continuity and Information Assurance / Security, ideally with recognised qualifications. Experience in managing IT security frameworks for both physical and personal security. Demonstrable experience in budgeting, planning and analysis. Experience in building and maintaining strong working relationships. Ability to think commercially and strategically. Organised with project management skills. Excellent team leadership skills and behaviours. Experienced team player - able to listen and contribute in equal measure and engage with and encourage a wide range of opinions. Strong presentation, written and oral communication skills. Strong numeracy and analytic skills informing evidence-based decisions. Excellent interpersonal skills, able to influence, build and maintain strong working relationships with a wide range of stakeholders; collaborative and consultative. Motivated, adaptable and proactive with the ability to work flexibly in a changing environment; highly resilient and politically astute. Auditing and/or management of audit activity; possibly with recognised qualifications. Experience in shared service and/or customer service delivery Experience in the public sector. Likely to be educated to degree level. What's on Offer A competitive salary - to be discussed on a one-to-one basis. Excellent defined Pension scheme with an employer contribution of 27%. Annual leave allowance of 28 days rising after the first year to a maximum of 30 days. Hybrid working provides the flexibility to work from the office and at home with Offices in Swindon, Newport and Billingham (plus a season ticket loan to spread the travel cost) Childcare scheme and on-site nursery (at our Swindon office) Parental leave and family-friendly policies. Three volunteering days each year enabling you to pursue your passion to support the local community. Wellbeing support through our Employment Assistance Programme and other Wellbeing tools. Cycle to work scheme and on-site facilities On-the-job training, coaching, and in-house courses to build on your personal and professional skills Financial support and flexibility while you work towards professional qualifications Celebrating and recognising employee achievements through our recognition scheme Clear and flexible career pathways and opportunities to widen your experience to support your progression Michael Page is part of the PageGroup. Michael Page is a trading name of Michael Page International Recruitment Limited. Registered in England No. Registered Office: 200 Dashwood Lang Road, Bourne Business Park, Addlestone, Surrey, KT15 2NX
Jan 27, 2024
Full time
We have been made aware of a global phishing campaign where employees from companies are being impersonated. We are confident that no PageGroup system has been breached. Find out how to protect yourself Head of Risk, Information, Security and Compliance Swindon Permanent The business is planning for significant growth and transformation. Hybrid working practices in place. About Our Client UKSBS is a leading public sector shared service centre, providing high-quality HR, Payroll, Finance, Procurement and IT services to our partners. Owned by the Department of Science, Innovation and Technology (DSIT), the Department for Energy Security and Net Zero (DESNZ), the Department of Business and Trade (DBT) and UK Research and Innovation (UKRI). We provide a range of efficient, scalable, and expert Finance, HR and Payroll, Procurement and Business IT services helping the advancement of the UK's economy and society. We are motivated by a desire to deliver high-quality, efficient and reliable service to over 25,000 civil and public servants, employed by our clients. As a public sector-owned shared service centre, UK SBS is motivated by a desire to deliver the highest possible quality of service to our partner organisations. We are proud to play our part in contributing to the success of our partners. We aspire to be the leading UK public sector business service provider, efficiently and securely managing multiple technology platforms and delivering a great end-user experience, underpinned by simple processes and cutting-edge IT. Our operating model will balance harnessing the value for money and efficiency offered by greater automation and self-service, with responsive and personal interactions for more complex needs. Our flexible approach will enable us to flexibly support a wide and changing range of partner requirements. We plan to welcome new public sector partners to our mutual ownership model which will ensure the best value for the public purse. Our people will continue to be at the heart of our company, supported by empowered leaders and enabled by an inclusive and diverse working culture. Job Description You will be working closely with the Executive team and our Chief Executive Officer (Senior Information Risk Owner) with the responsibility and accountability for leading an expert team to ensure UKSBS (people, systems, information and premises) have robust, proportionate and cost-effective: Information Security. Incident Management, Business Continuity and Disaster Recovery. Information Management and Data Protection. Risk Management, Internal Controls and Audit Programme coordination. Counter Fraud, including legal requirements under the Bribery Act. You will also act as the Departmental Security Advisor. Flexibility may be required to respond to the changing needs of the organisation and the service. You may also be asked to undertake ad hoc activities in support of the Chief Executive Officer and other Executives. Responsibilities will include: Work closely across the Executive and Senior Leadership Group to ensure alignment of RISC objectives with the UKSBS business plan and operational plan. Performance lead and develop the Risk, Information, Security and Compliance (RISC) team, ensuring that members have appropriate business exposure, are professionally competent and highly motivated. Has accountability for ensuring the team operates to budget. Provide coaching and mentoring support to management colleagues across the business. Represent the Risk, Information, Security and Compliance (RISC) function, as required, at the UKSBS Committees. Represent UKSBS, as required, at the UKSBS Audit Committee and key partnership/client meetings. Ensure UKSBS has a positive working relationship with GIAA. Maintain a strong network of Risk, Information, Security and Compliance (RISC) contacts across Government, the public sector and wider business. Provide strategic, tactical, and operational advice to Executive and Senior Management. Design and deliver an appropriate suite of Risk, Information, Security and Compliance (RISC) strategies, policies and processes, maintaining legal compliance and alignment with HM government best practices. Drive cultural alignment to agreed policies across the organisation. Gain agreement from Executive and Audit Committees to an annual Risk, Information, Security and Compliance (RISC) delivery plan. Act as the Security Advisor, coordinating the company response to security-related matters, including assessing and making judgements in relation to risk on behalf of the SIRO and Executive. Providing senior level guidance and support to the Information Manager and Data Protection Officer, Senior Information Security Manager, Information Security Manager and Risk and Assurance Manager ensuring coordination that supports delivery by Digital and Information, Operations, and Partnerships and Change. Ensure delivery of the UKSBS annual audit plan as agreed by the Audit Committee. Support and report progress to close reported audit findings. Oversee the development and testing of business continuity and resilience plans. Act as the professional adviser to Gold and Silver command in the event of a business continuity incident Ensure UKSBS' cyber security is maintained Ensure planning, delivery and reporting of an annual cycle of mandatory Risk, Information, Security and Compliance (RISC) training. Oversee the quality and timeliness of reporting, papers and reports for formal meetings and supporting communications material. Identify opportunities for control enhancements, service/quality improvements and operational efficiency. Act as Programme Lead / SRO for activities, as required, ensuring appropriate governance is maintained and dependencies to other programmes are addressed. Act as Project Manager for key projects when necessary. Identify, monitor and report business case benefits, and evidence success. The Successful Applicant A significant specialist background in Risk, Information Management, Business Continuity and Information Assurance / Security, ideally with recognised qualifications. Experience in managing IT security frameworks for both physical and personal security. Demonstrable experience in budgeting, planning and analysis. Experience in building and maintaining strong working relationships. Ability to think commercially and strategically. Organised with project management skills. Excellent team leadership skills and behaviours. Experienced team player - able to listen and contribute in equal measure and engage with and encourage a wide range of opinions. Strong presentation, written and oral communication skills. Strong numeracy and analytic skills informing evidence-based decisions. Excellent interpersonal skills, able to influence, build and maintain strong working relationships with a wide range of stakeholders; collaborative and consultative. Motivated, adaptable and proactive with the ability to work flexibly in a changing environment; highly resilient and politically astute. Auditing and/or management of audit activity; possibly with recognised qualifications. Experience in shared service and/or customer service delivery Experience in the public sector. Likely to be educated to degree level. What's on Offer A competitive salary - to be discussed on a one-to-one basis. Excellent defined Pension scheme with an employer contribution of 27%. Annual leave allowance of 28 days rising after the first year to a maximum of 30 days. Hybrid working provides the flexibility to work from the office and at home with Offices in Swindon, Newport and Billingham (plus a season ticket loan to spread the travel cost) Childcare scheme and on-site nursery (at our Swindon office) Parental leave and family-friendly policies. Three volunteering days each year enabling you to pursue your passion to support the local community. Wellbeing support through our Employment Assistance Programme and other Wellbeing tools. Cycle to work scheme and on-site facilities On-the-job training, coaching, and in-house courses to build on your personal and professional skills Financial support and flexibility while you work towards professional qualifications Celebrating and recognising employee achievements through our recognition scheme Clear and flexible career pathways and opportunities to widen your experience to support your progression Michael Page is part of the PageGroup. Michael Page is a trading name of Michael Page International Recruitment Limited. Registered in England No. Registered Office: 200 Dashwood Lang Road, Bourne Business Park, Addlestone, Surrey, KT15 2NX
Head of Applications & Service Delivery Reporting to the COO, the Head of Applications & Service Delivery will own and manage Seraphine's application landscape, spanning the entire business from design and sourcing through supply chain. Some of those systems are maintained inhouse while others are SaaS. As the Head of Applications & Service Delivery, you will be an experienced manager of high performing teams, bringing strong service management capabilities to build capability within the IT team, ensuring that our third party vendors are managed and delivering to SLAs. This role is a key enabler in allowing Seraphine to keeping our systems running smoothly, and you will be involved in a variety of ongoing areas ranging from systems improvements/changes to driving continuous improvement initiatives. You will ensure great collaboration with all teams for optimal project delivery as well as consistent BAU management of production systems. You will play a pivotal part in safeguarding the Seraphine's digital assets, systems, and data from cyber threats and ensuring compliance with industry standards and regulations. This role will provide you with the opportunity to drive your business understanding and technical skillset forward, while taking advantage of being part of a small team which can move at pace. About You: The position requires a very hands-on individual with a strong technology foundation - ranging from the latest eCommerce platforms & tools to managing and operating high-availability, secure applications. You appreciate that the lifecycle of a solution extends from idea to de-commission, not idea to initial go-live. You also understand the Ops aspect of DevOps, thinking about more than just the delivery of the application; you also appreciate the importance of logging, monitoring, observability, and issue diagnosis. You'll also be a driver of good practice and an excellent communicator with the ability to lead, engage and influence at all levels. Experience of taking responsibility for a wide remit within IT will be essential and you will have a quick learning, pro-active, problem-solving approach to work. Main Responsibilities Oversee day-to-day operation of the Seraphine applications landscape, ensuring world-class performance & availability. Collaborate with vendors and service providers to manage and maintain relationships, negotiate contracts, and stay updated with emerging technologies and product offerings. Manage the workload, assignment of tasks and responsibilities within the Applications and Infrastructure teams ensuring a focus on delivering great service. Foster a culture of knowledge sharing and collaboration within the Applications and Infrastructure teams Understand the criticality of supported systems to a level where the business impact of a malfunction can be interrogated and assessed, leading to the appropriate level of action and priority being given to the resolution process. Own project management activities for assigned projects, ensuring that projects are managed through to delivery within agreed timescales and budgetary constraints. Manage major incidents relating to applications end to end, including customer communications and internal updates, ensuring timely resolution of issues, and minimizing impact on service availability. Provide a point of escalation for issues raised by team members, including both technical queries and general issues Ensure that new or changed services are adequately documented to facilitate their day-to-day support, and that new procedures are created where required. Provide and maintain processes and knowledge documents to allow the team to support a breadth of applications As a line manager, provide support and guidance for your direct reports to help them grow and develop in their roles. Manage service level agreements (SLAs) and ensure service delivery meets or exceeds performance targets. Implement and maintain monitoring and alerting systems to proactively identify and address potential issues. Implement comprehensive disaster recovery strategies and business continuity plans Establish and maintain a robust cybersecurity framework to protect sensitive data and system integrity, adhering to industry standards and regulatory compliance. What we stand for We are the leading scale player in a specialist market - maternity and nursing wear - and we have 18 years of experience behind us doing this and nothing but this. But what we do at Seraphine is more than just fashion and clothes. We help women feel absolutely confident in their changing bodies and enable them to continue to express the choice and style they had prior to pregnancy, during pregnancy, whilst providing them with product innovations that make motherhood a breeze. What we're delivering We are highly international (more than 2/3 of our sales are from markets outside of the UK) and highly digital - we were an early embracer of eCommerce and the channel now represents 90% of our revenue. We're also a digital marketing machine: acquiring customers profitably from first order, with more than half returning for a second order during the current pregnancy and more and more coming back to us again when the family grows further. This all contributes to market leading profit and product margins and our double-digit growth rates across the world put the rest to shame. Good knowledge of technical architecture and the functionality of applications used to support the business. Experience of working in a dynamic environment often with shifting priorities Solid understanding of IT service management (ITSM) frameworks and processes, such as ITIL. Experience of managing relationships with third party service providers A strategic thinker, able to anticipate issues and to drive solutions and accountability. Strong leadership and team management skills - an ability to engage, develop and motivate, alongside being able to identify and develop talent Excellent time management skills, the ability to prioritise projects and process multiple tasks. Ability to communicate in an effective and concise manner so that complex logistic information is translated into relevant and clear business terms. Understand the security and fraud threats that affect an eCommerce business and any regulatory requirements that the business must follow. Experience with information, data and cybersecurity best practices (ideally ISO27001 or Cyber Essentials Plus), technologies, standards and controls, including ongoing management and prevention is a plus Life Assurance Income Protection Health Cash Plan Holiday entitlement - 25 days excluding bank holidays (with one additional day per year of service) Birthday day off Discretionary Company Bonus Scheme Enhanced Maternity/Paternity Scheme Family friendly policies Staff discount policy (50%) Salary Exchange Benefits: Pension Scheme - 5% employee and 3% employer contribution Technology Will Writing Holiday Exchange Workplace Nursery Gym Benefit Cycle 2 Work Discount Benefits: Gadget Insurance Cycle Insurance Cancer Screening Pet Insurance Lottie - Care Home Discount Health & Wellbeing Videos
Jan 16, 2024
Full time
Head of Applications & Service Delivery Reporting to the COO, the Head of Applications & Service Delivery will own and manage Seraphine's application landscape, spanning the entire business from design and sourcing through supply chain. Some of those systems are maintained inhouse while others are SaaS. As the Head of Applications & Service Delivery, you will be an experienced manager of high performing teams, bringing strong service management capabilities to build capability within the IT team, ensuring that our third party vendors are managed and delivering to SLAs. This role is a key enabler in allowing Seraphine to keeping our systems running smoothly, and you will be involved in a variety of ongoing areas ranging from systems improvements/changes to driving continuous improvement initiatives. You will ensure great collaboration with all teams for optimal project delivery as well as consistent BAU management of production systems. You will play a pivotal part in safeguarding the Seraphine's digital assets, systems, and data from cyber threats and ensuring compliance with industry standards and regulations. This role will provide you with the opportunity to drive your business understanding and technical skillset forward, while taking advantage of being part of a small team which can move at pace. About You: The position requires a very hands-on individual with a strong technology foundation - ranging from the latest eCommerce platforms & tools to managing and operating high-availability, secure applications. You appreciate that the lifecycle of a solution extends from idea to de-commission, not idea to initial go-live. You also understand the Ops aspect of DevOps, thinking about more than just the delivery of the application; you also appreciate the importance of logging, monitoring, observability, and issue diagnosis. You'll also be a driver of good practice and an excellent communicator with the ability to lead, engage and influence at all levels. Experience of taking responsibility for a wide remit within IT will be essential and you will have a quick learning, pro-active, problem-solving approach to work. Main Responsibilities Oversee day-to-day operation of the Seraphine applications landscape, ensuring world-class performance & availability. Collaborate with vendors and service providers to manage and maintain relationships, negotiate contracts, and stay updated with emerging technologies and product offerings. Manage the workload, assignment of tasks and responsibilities within the Applications and Infrastructure teams ensuring a focus on delivering great service. Foster a culture of knowledge sharing and collaboration within the Applications and Infrastructure teams Understand the criticality of supported systems to a level where the business impact of a malfunction can be interrogated and assessed, leading to the appropriate level of action and priority being given to the resolution process. Own project management activities for assigned projects, ensuring that projects are managed through to delivery within agreed timescales and budgetary constraints. Manage major incidents relating to applications end to end, including customer communications and internal updates, ensuring timely resolution of issues, and minimizing impact on service availability. Provide a point of escalation for issues raised by team members, including both technical queries and general issues Ensure that new or changed services are adequately documented to facilitate their day-to-day support, and that new procedures are created where required. Provide and maintain processes and knowledge documents to allow the team to support a breadth of applications As a line manager, provide support and guidance for your direct reports to help them grow and develop in their roles. Manage service level agreements (SLAs) and ensure service delivery meets or exceeds performance targets. Implement and maintain monitoring and alerting systems to proactively identify and address potential issues. Implement comprehensive disaster recovery strategies and business continuity plans Establish and maintain a robust cybersecurity framework to protect sensitive data and system integrity, adhering to industry standards and regulatory compliance. What we stand for We are the leading scale player in a specialist market - maternity and nursing wear - and we have 18 years of experience behind us doing this and nothing but this. But what we do at Seraphine is more than just fashion and clothes. We help women feel absolutely confident in their changing bodies and enable them to continue to express the choice and style they had prior to pregnancy, during pregnancy, whilst providing them with product innovations that make motherhood a breeze. What we're delivering We are highly international (more than 2/3 of our sales are from markets outside of the UK) and highly digital - we were an early embracer of eCommerce and the channel now represents 90% of our revenue. We're also a digital marketing machine: acquiring customers profitably from first order, with more than half returning for a second order during the current pregnancy and more and more coming back to us again when the family grows further. This all contributes to market leading profit and product margins and our double-digit growth rates across the world put the rest to shame. Good knowledge of technical architecture and the functionality of applications used to support the business. Experience of working in a dynamic environment often with shifting priorities Solid understanding of IT service management (ITSM) frameworks and processes, such as ITIL. Experience of managing relationships with third party service providers A strategic thinker, able to anticipate issues and to drive solutions and accountability. Strong leadership and team management skills - an ability to engage, develop and motivate, alongside being able to identify and develop talent Excellent time management skills, the ability to prioritise projects and process multiple tasks. Ability to communicate in an effective and concise manner so that complex logistic information is translated into relevant and clear business terms. Understand the security and fraud threats that affect an eCommerce business and any regulatory requirements that the business must follow. Experience with information, data and cybersecurity best practices (ideally ISO27001 or Cyber Essentials Plus), technologies, standards and controls, including ongoing management and prevention is a plus Life Assurance Income Protection Health Cash Plan Holiday entitlement - 25 days excluding bank holidays (with one additional day per year of service) Birthday day off Discretionary Company Bonus Scheme Enhanced Maternity/Paternity Scheme Family friendly policies Staff discount policy (50%) Salary Exchange Benefits: Pension Scheme - 5% employee and 3% employer contribution Technology Will Writing Holiday Exchange Workplace Nursery Gym Benefit Cycle 2 Work Discount Benefits: Gadget Insurance Cycle Insurance Cancer Screening Pet Insurance Lottie - Care Home Discount Health & Wellbeing Videos
Stevenage MBDA Missile Systems - Together. For the future of defence. Salary: circa. £60-70K dependent on experience + bonus + benefits Hybrid working pattern: Where possible, we will seek to accommodate a blended approach to on-site and remote working. Typically, 2 days per week on site and 3 days remote based. The opportunity: Do you want to be the lead in a crucial and exciting role within in our Security team? If so then this position as Security Assurance Manager could be just for you. Working on behalf of the UK CISO, you will be the local security leader and expert in all elements of security. Ensuring your allocated areas continuously align to MBDA's Security Strategy and Polices, Customer's Security Policies, expectations, all applicable laws and regulations. Updating ISO 27001 documentation with any changes and ensure all policies, processes, procedures and technical infrastructure remains compliant. As part of the new incoming MOD Continuous Accreditation Process (CAP), your role as the first line representative for your areas of responsibility will be key. Tasked with leading all change management activities, you will ensure all change remains appropriate and complaint with policies. Delivering a technical security consultancy service to the business including architecture and solution suitability. Having the opportunity to work with different areas of the business you'll work proactively to coordinate and build relationships with the Principle Cyber and Information Security Advisor for all required accreditation activities. In the event of a security related incident your role will be critical in leading the response, business continuity and disaster recovery for your area. As well as the above you'll coordinate and action all technical security testing to be conducted within your areas, as well as maintaining upward reporting to MBDA UK Directors on the results. What we're looking for: Knowledge of National Security requirements for systems processing classified UK government data along with security risk management Comfortable with establishing and managing relationships with national security authorities and industry partners Experienced knowledge of modern hacking tactics, techniques and procedures. Expert in security concepts for IT network architectures, applications, cloud services and hardening of operating systems Ability to present risk balanced security solutions to problems and provide clear advice directly to Directors Background in managing and developing inexperienced IT Engineers Ideally a knowledge of system accreditation and the approvals process for government encryption and networks Knowledge of business IT processes and associated approval systems Desirable: CISSP, InfoSec/Cyber Degree What to expect: We offer opportunities for career progression, paid overtime (subject to level), bonus scheme, comprehensive pension package, annual salary review, collaborative working environment and excellent on-site facilities. We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process. We also welcome applicants who are looking for flexible working arrangements. Follow us on LinkedIn (MBDA), Twitter Instagram (lifeatMBDA_UK) and Glassdoor or visit our MBDA Careers website for more information! Please Note: MBDA UK requires all employees to achieve appropriate clearances!
Dec 08, 2022
Full time
Stevenage MBDA Missile Systems - Together. For the future of defence. Salary: circa. £60-70K dependent on experience + bonus + benefits Hybrid working pattern: Where possible, we will seek to accommodate a blended approach to on-site and remote working. Typically, 2 days per week on site and 3 days remote based. The opportunity: Do you want to be the lead in a crucial and exciting role within in our Security team? If so then this position as Security Assurance Manager could be just for you. Working on behalf of the UK CISO, you will be the local security leader and expert in all elements of security. Ensuring your allocated areas continuously align to MBDA's Security Strategy and Polices, Customer's Security Policies, expectations, all applicable laws and regulations. Updating ISO 27001 documentation with any changes and ensure all policies, processes, procedures and technical infrastructure remains compliant. As part of the new incoming MOD Continuous Accreditation Process (CAP), your role as the first line representative for your areas of responsibility will be key. Tasked with leading all change management activities, you will ensure all change remains appropriate and complaint with policies. Delivering a technical security consultancy service to the business including architecture and solution suitability. Having the opportunity to work with different areas of the business you'll work proactively to coordinate and build relationships with the Principle Cyber and Information Security Advisor for all required accreditation activities. In the event of a security related incident your role will be critical in leading the response, business continuity and disaster recovery for your area. As well as the above you'll coordinate and action all technical security testing to be conducted within your areas, as well as maintaining upward reporting to MBDA UK Directors on the results. What we're looking for: Knowledge of National Security requirements for systems processing classified UK government data along with security risk management Comfortable with establishing and managing relationships with national security authorities and industry partners Experienced knowledge of modern hacking tactics, techniques and procedures. Expert in security concepts for IT network architectures, applications, cloud services and hardening of operating systems Ability to present risk balanced security solutions to problems and provide clear advice directly to Directors Background in managing and developing inexperienced IT Engineers Ideally a knowledge of system accreditation and the approvals process for government encryption and networks Knowledge of business IT processes and associated approval systems Desirable: CISSP, InfoSec/Cyber Degree What to expect: We offer opportunities for career progression, paid overtime (subject to level), bonus scheme, comprehensive pension package, annual salary review, collaborative working environment and excellent on-site facilities. We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process. We also welcome applicants who are looking for flexible working arrangements. Follow us on LinkedIn (MBDA), Twitter Instagram (lifeatMBDA_UK) and Glassdoor or visit our MBDA Careers website for more information! Please Note: MBDA UK requires all employees to achieve appropriate clearances!
We are nuclear professionals in everything we do The Sellafield site is one of the biggest construction sites in Europe and we are a world leader in the nuclear industry. We're responsible for some of the largest engineering projects in the UK. The Sellafield site is one of the biggest construction sites in the UK. Our challenges are almost always industry firsts. Hazard reduction is incredibly demanding technically, calling for vision, imagination and expertise. The complexity of each project is unmatched anywhere else in the nuclear sector. Our relentless pursuit of excellence is reflected in our health, safety, security, resilience and environmental performance standards. To support this we have a vacancy for a Digital Forensics & Incident Response Supervisor based within our Security & Resilience department. On a day to day basis the role involves: • Manage and develop a shift team of CSOC Analysts in relation to protective monitoring, incident response, and threat hunting to ensure the delivery of a mature and highly skilled CSOC. • Lead, co-ordinate and provide technical assurance & escalation for daily investigations performed within the CSOC to ensure high standards of working across the team and provide an in-depth technical knowledge required to delivery protective monitoring and incident response across the Corporate and OT information systems. • Develop and enact Digital Forensics capabilities within CSOC relating to escalated investigations, threat hunting and incident response to deliver cyber threat detection and forensically sound evidence, in accordance with government and ONR guidelines. • Lead in the development and tuning of Cyber Operations tooling and its application to the business, aligning with the cyber exploitation / Cyber Kill Chain / Mitre ATT&CK matrix, increase capabilities and efficiency of incident response, mitigating threats to ensure new threats and vulnerabilities are managed and mitigated. • Develop and perform the activities defined in the Cyber Security Incident Response Plan / Forensics Readiness plan, ensuring Operational elements are achieved in accordance with site emergency arrangements. • To oversee technical implementation and commissioning of Cyber Security tooling solutions to agreed requirements. • To provide advice and guidance to internal and external stakeholders in relation to Digital forensics, Incident Response and Cyber Security in general to ensure threats are identified, with measures understood to reduce impact and consequence. • To assess, suggest or take remedial action to Cyber Security Incidents within defined policies and standards. • To review, document and apply good practice against all Cyber Security incidents for damage arising from compromise of company sensitive and Government protectively marked information across Sellafield. • To review Cyber security tools, processes and procedures and assist in testing the robustness of current and developing systems. To deputise for the CSOC Manager when required. To thrive in the role you will need: • Degree qualified or 2 years minimum experience in Cyber Security or Information Assurance. • Knowledge of Digital Forensics. • Capable of obtaining GIAC certification in IT Security/Digital Forensics field. • Knowledge of Business Continuity. • Strong understanding of network protocols. • Line management / leadership experience. • Ability to achieve DV clearance + NPPV You may also have: • GCIA (Certified Intrusion Analyst). • GCFE (Certified Forensic Examiner). • GCFA (Certified Forensic Analyst). • GNFA (Network Forensic Analyst). • GPEN (Penetration Tester). • CMI First Line Management qualification. • APM / Prince2 Project Management. • IOSH Managing Safely. • Control Systems experience. • Malware analysis experience. • Vulnerability analysis experience. Pay & Benefits Salary: £38,801 Closing Date: 29/11/21 Location: Sellafield, West Cumbria In promoting equal opportunities, Sellafield Ltd welcomes applications from all sections of the community. We select people according to their abilities and our needs. You are advised to regularly check your emails (including any junk mail/spam folders) for correspondence related to this post, including assessment or interview invitations and any other type of correspondence relating to your application. In the event of a high number of responses to any advert, Sellafield Ltd reserves the right to close the advert early. As users of the Disability Confident Scheme, we guarantee to interview all disabled applicants who meet the minimum essential skills for the vacancy. You will be able to declare a disability when completing our application form
Dec 01, 2021
Full time
We are nuclear professionals in everything we do The Sellafield site is one of the biggest construction sites in Europe and we are a world leader in the nuclear industry. We're responsible for some of the largest engineering projects in the UK. The Sellafield site is one of the biggest construction sites in the UK. Our challenges are almost always industry firsts. Hazard reduction is incredibly demanding technically, calling for vision, imagination and expertise. The complexity of each project is unmatched anywhere else in the nuclear sector. Our relentless pursuit of excellence is reflected in our health, safety, security, resilience and environmental performance standards. To support this we have a vacancy for a Digital Forensics & Incident Response Supervisor based within our Security & Resilience department. On a day to day basis the role involves: • Manage and develop a shift team of CSOC Analysts in relation to protective monitoring, incident response, and threat hunting to ensure the delivery of a mature and highly skilled CSOC. • Lead, co-ordinate and provide technical assurance & escalation for daily investigations performed within the CSOC to ensure high standards of working across the team and provide an in-depth technical knowledge required to delivery protective monitoring and incident response across the Corporate and OT information systems. • Develop and enact Digital Forensics capabilities within CSOC relating to escalated investigations, threat hunting and incident response to deliver cyber threat detection and forensically sound evidence, in accordance with government and ONR guidelines. • Lead in the development and tuning of Cyber Operations tooling and its application to the business, aligning with the cyber exploitation / Cyber Kill Chain / Mitre ATT&CK matrix, increase capabilities and efficiency of incident response, mitigating threats to ensure new threats and vulnerabilities are managed and mitigated. • Develop and perform the activities defined in the Cyber Security Incident Response Plan / Forensics Readiness plan, ensuring Operational elements are achieved in accordance with site emergency arrangements. • To oversee technical implementation and commissioning of Cyber Security tooling solutions to agreed requirements. • To provide advice and guidance to internal and external stakeholders in relation to Digital forensics, Incident Response and Cyber Security in general to ensure threats are identified, with measures understood to reduce impact and consequence. • To assess, suggest or take remedial action to Cyber Security Incidents within defined policies and standards. • To review, document and apply good practice against all Cyber Security incidents for damage arising from compromise of company sensitive and Government protectively marked information across Sellafield. • To review Cyber security tools, processes and procedures and assist in testing the robustness of current and developing systems. To deputise for the CSOC Manager when required. To thrive in the role you will need: • Degree qualified or 2 years minimum experience in Cyber Security or Information Assurance. • Knowledge of Digital Forensics. • Capable of obtaining GIAC certification in IT Security/Digital Forensics field. • Knowledge of Business Continuity. • Strong understanding of network protocols. • Line management / leadership experience. • Ability to achieve DV clearance + NPPV You may also have: • GCIA (Certified Intrusion Analyst). • GCFE (Certified Forensic Examiner). • GCFA (Certified Forensic Analyst). • GNFA (Network Forensic Analyst). • GPEN (Penetration Tester). • CMI First Line Management qualification. • APM / Prince2 Project Management. • IOSH Managing Safely. • Control Systems experience. • Malware analysis experience. • Vulnerability analysis experience. Pay & Benefits Salary: £38,801 Closing Date: 29/11/21 Location: Sellafield, West Cumbria In promoting equal opportunities, Sellafield Ltd welcomes applications from all sections of the community. We select people according to their abilities and our needs. You are advised to regularly check your emails (including any junk mail/spam folders) for correspondence related to this post, including assessment or interview invitations and any other type of correspondence relating to your application. In the event of a high number of responses to any advert, Sellafield Ltd reserves the right to close the advert early. As users of the Disability Confident Scheme, we guarantee to interview all disabled applicants who meet the minimum essential skills for the vacancy. You will be able to declare a disability when completing our application form
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
Nov 30, 2021
Full time
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
Nov 30, 2021
Full time
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
Nov 30, 2021
Full time
Summary Are you looking for an organisation that cares about the work-life balance of its workforce? An employer who offers structured personal development, progression opportunities and outstanding training? Well look no further! Life moves fast at HMRC which is why we're the largest Landlord in Government! We're looking to recruit Property Specialists, Project Managers, Facilities Managers and Engineers along with candidates with expertise in a wide range of property related services that can work at pace in a fast paced and agile workplace. At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve. We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you. Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. Job description This role is required to lead the related Design and Discovery activity for Physical Security and Resilience in HMRC Estates Directorate. To lead on identifying pan-estate security risks, defining physical security and resilience standards and contract requirements, and assuring that they are being correctly applied to minimise the risks to HMRC people, information and assets There is a requirement to evaluate threat and risks to HMRC business continuity/resilience on both the existing and new estates, which need to be addressed by the application of Physical Security principles. Physical Security is defined as; security measures that are designed to deny access to unauthorized personnel (including attackers or even accidental intruders) from physically accessing a building, facility, resource, or stored information; The provision of guidance on how to design structures and building services to resist potentially hostile acts, although there are other considerations and situations in which physical security measures are valuable (for example, limiting access within a facility and/or to specific assets) Responsibilities As our Physical Security and Resilience Lead you will be responsible for, but not limited to: • Identify security and resilience risks and develop physical security responses to avoid or mitigate these risks. • Work closely with HMRC security professionals, and those from the wider Civil Service, to integrate physical security responses with Cyber, Information and Personnel security responses to deliver a holistic solution as part of a layered and integrated approach • Identify opportunities to integrate physical security measures with actions required in other business areas • Define physical security and resilience standards for HMRC - in conjunction with other parts of the Civil Service - for all estate facilities including offices, digital facilities, car parking and warehousing • Specify physical security requirements for inclusion in construction and estates service provision contracts - including building structure, layout, barriers, lighting and support services • Specify business resilience / continuity requirements for inclusion in construction and estates services provision contracts - including power supply and stand-by power • Work collaboratively with HMRC staff responsible for the provision of incident response and security services - including pass issues, access control, mail screening and guarding. • Plan and deliver physical security and resilience projects • Plan and conduct physical security training • Carry out site visits to provide guidance and support to local staff, and assurance to management Ideal Candidate: • General Security background (Required) • Significant Built Environment Security experience. (Required) • Applied Physical Security - Practitioner (Required) or Expert (Desired) • Legal and Regulatory Environment - Practitioner (Required) or Expert (Desired) • Understanding Risk and Mitigation - Practitioner (Required) or Expert (Desired) • Protective Security - Awareness (Required) or Working (Desired) • Understanding of Threats - Awareness (Required) or Working (Desired) • Security Clearance - Minimum at SC, but with potential to higher level clearance (Required) • Ability to travel nationally in role to all UK sites/facilities. (Required) • Capable of operating efficiently across a wide variety of differing business areas. (Required) Essential Qualifications: • SME: Counter Terrorism; Blast Effects; Hostile Vehicle Mitigation Expertise. • Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. • Working knowledge of BIM; REVIT; CAD. Our Offer While we work hard at HMRC we respect your work-life balance and offer flexible working conditions reflecting the best in the sector. We offer you structured personal development, progression opportunities, and outstanding training. Memberships Member or Fellow of a relevant security professional body such as; CySP; ISMI; Security Institute; RSES. Benefits • Learning and development tailored to your role • An environment with flexible working options • A culture encouraging inclusion and diversity • A Civil Service pension
