Senior Information Security Officer

About us Information Services Division (ISD) is the primary provider of IT services to UCL. We support and enhance learning, teaching, research and administrative processes by providing information- and technology-related services to over 50,000 staff and students of UCL and associated institutions. Our goal is to be the leading IT services group in the HE sector and we are growing our team's capability in experience/UX, agile development, security, cloud, service management and partnering. We are modernising our technology foundations, digitising the processes of the university to transform experience for students and staff, and partnering across the university to drive differentiation in UCL education and research. Portfolio and Product Delivery manage the delivery of technology led change, partnering with colleagues across UCL. We collaborate as cross functional agile teams and have core capabilities in experience, development & test, analysis and agile delivery management.

About the role Within ISD, this post is in the Chief Information Security Office (CISO) which leads on all aspects of security at UCL. CISO is divided into two teams covering Security Operations and Governance, Risk and Compliance (GRC). You will work closely with stakeholders across UCL to provide expert advice on information security matters, support risk assessments and assurance activities, lead the development and improvement of policies and standards, and promote compliance with UCL's security framework in a pragmatic and solution-oriented manner. The role also includes providing leadership on GRC initiatives, mentoring colleagues, and helping to shape and strengthen UCL's overall security posture. About you As the ideal candidate you will have a mix of the following skills and experience:

• Experience operating as part of an Information Security or Governance, Risk and Compliance team, providing advice, support and services to a wide range of stakeholders.
• Experience leading or contributing to security risk assessments, assurance reviews, audits, compliance activities or security governance initiatives.
• Strong knowledge of information security governance, risk management and compliance principles, with the ability to apply risk-based thinking to complex situations.
• Experience developing, reviewing or implementing information security policies, standards, guidance or frameworks.
• Excellent written and verbal communication skills, with experience producing reports and presenting information to both technical and non-technical audiences.
• Experience building effective relationships with stakeholders at all levels and providing pragmatic, customer-focused security advice.
• Relevant degree or equivalent professional qualifications and experience.

What we offer As well as the exciting opportunities this role presents, we also offer some great benefits some of which are below:

• 41 Days holiday (27 days annual leave 8 bank holiday and 6 closure days)
• Additional 5 days' annual leave purchase scheme
• Defined benefit career average revalued earnings pension scheme (CARE)
• Cycle to work scheme and season ticket loan
• Immigration loan
• Relocation scheme for certain posts
• On-Site nursery
• On-site gym
• Enhanced maternity, paternity and adoption pay
• Employee assistance programme: Staff Support Service
• Discounted medical insurance Visit https://www.ucl.ac.uk/work-at-ucl/rewards-and-benefits to find out more.

Our commitment to Equality, Diversity and Inclusion As London's Global University, we know diversity fosters creativity and innovation, and we want our community to represent the diversity of the world's talent.