Head of Cyber Security
Role summary
The Head of Cyber Security is responsible for the cyber security specialism. They provide strategic direction, anticipate challenges, drive performance and build the capability required to ensure the security of new and existing services.
Role expectations
- Be the primary point of contact on Cyber Security issues with key stakeholders, including external parties, and actively develop strong working relationships in relation to Cyber Security
- Ensure that the Cyber Security policies and security controls remain appropriate and proportionate to the assessed risks, and are responsive and adaptable to the changing threat environment, business requirements and central government policies
- Champion learning, development and accreditation, cultivate talent and foster an inclusive, diverse and motivated workforce
- Work with the heads of specialisms to promote cross-government security mindedness
- Influence, change and impact decisions with both internal and external stakeholders
- Promote the Government Cyber Security Profession and advise on Cyber Security risks
- Work with industry, including security manufacturers and security consultants, to drive best practice
- Drive professional development by working with the Government Security Function to set and drive continuous learning standards
Skills
Skill | Principal |
---|---|
Applied security capability | Expert |
Protective security | Working |
Threat understanding | Awareness |
Information risk assessment and risk management | Awareness |
Core learning
BCS Certificate in Information Security Management Principles (CISMP)
Foundation Certificate in Cyber Security
Management of Risk (M_o_R) Foundation
NIST Cyber Security Professional (NCSP) Foundation Certificate
GIAC Information Security Fundamentals (GISF)
Certified in Risk and Information Systems Control (CRISC)
(ISC)2 Certified Information Systems Security Professional
Training (CISSP) incl Exam
MGT512: Security Leadership Essentials for Managers
BCS Practitioner Certificate in Information Risk Management (PCIRM)
GIAC Security Essentials (GSEC)
(ISC)2 Systems Security Certified Practitioner (SSCP)