Head of Cyber Security & Assurance

<span class="NormalTextRun SCXW204480908 BCX8" data-ccp-parastyle="NPL intro para" data-ccp-parastyle-defn="{"ObjectId":"75d5d98e-990f-4709-a4da-a3a685968476|63","ClassId":1073872969,"Properties":[469775450,"NPL intro para",201340122,"2",134234082,"true",134233614,"true",469778129,"NPLintropara",335572020,"1",201342448,"1",469777841,"Arial",469777842,"Arial",469777843,"Calibri",469777844,"Arial",469769226,"Arial,Calibri",335551500,"10526880",268442635,"22",335559740,"312",201341983,"0",335559739,"120",335559738,"240",469775498,"Normal",469778324,"Normal"]}" style="-webkit-user-drag: none; -webkit-tap-highlight-color: transparent; margin: 0px; padding: 0px; user-select: text;">

The National Physical Laboratory is wholly owned by the Department for Science, Innovation and Technology (DSIT) and as such we are challenged to maximise our impact for the security, resilience, and prosperity of the UK.  In particular (but not limited to) we research the emerging technologies in Quantum, AI, Engineering Biology, Telecommunications, Semiconductors and Green Technologies, and in many cases the combination of many of these as they advance.

 The Cyber Security and Assurance team within NPL’s Chief Information Officer’s Office is the team responsible for monitoring, analysing and responding to threats to NPL’s unique Information Technology estate.

NPL faces a growing challenge in the Cyber Security space. Whilst some areas of the organisation are part of the UK’s critical national infrastructure and are therefore exemplars of the best in modern cyber security other, longer standing functions and operations of NPL’s 125-year-old operating lifespan, need the attention of a pragmatic and broadly experienced cyber security professional to help lift the organisation up to modern security standards. The ideal individual will have a pragmatic and organised approach to take NPL on the journey to become an exemplar of modern security practice and a sensible risk based cyber posture. The desired outcome is a harmonisation of the approach to Cyber Security across the whole organisation.

As theHead of Cyber Security & Assurance, reporting directly into NPL’s Chief Information Officer and a key member of the CIO’s Senior Leadership Team, you will act as NPL’s Chief Information Security Officer (CISO). You will lead our response to the rapidly evolving cyber security threat and shape our continuing investment in cyber security to support the needs of our customers. You will be advising at the most senior levels of the organisation on cyber security risks and strategic response.

You will also be able to fulfil an assurance role, ensuring that NPL adopts the most relevant and appropriate standards and certifications such as ISO:27001 and NCSC’s Cyber Assurance Framework certification.

This role will be based at the NPL’sHead Office in Teddington.

You will:

• Act as the Chief Information Security Officer (CISO) for NPL providing strategic oversight of information, cyber and technology security, reporting directly to the Chief Information Officer.
•  Provide leadership to NPL’s growing investment in the Cyber Security function, building a highly motivated, customer focused and performing teams that can support the breadth of NPL’s customers.
• Define, develop and deliver the Information Security Strategy across the organisation including NPL’s role in resilient national infrastructure ensuring engagement with the NPL Executive and Board.
• Identify changing threat models and vulnerabilities, implementing appropriate risk-based responses where required.
• Harden our systems and protect our people, information and technologies. Think big picture about organizational risk based on mission objectives and a calibrated understanding of existing and potential attacks.
• Develop, implement and maintain our internal IT & security program and drive high leverage initiatives in corporate IT, infrastructure and strategic cyber physical security interests.
• Develop, exercise, and lead incident response plans and processes. Work with existing government security functions to monitor for and respond to immediate threats, data breaches, and security incidents.
• Develop, implement and maintain information security policies for sharing commercially sensitive information. Develop access controls and information protection systems to implement said policies
• Coordinate external security consultants, services, and vendors

We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a minimum ofSCclearance with no restrictions or be willing to apply for and obtain SCclearance.

Longer term the role may requireDVclearance and you must be willing to undertake the process necessary to obtain this level of clearance if required.