Deputy CISO Full Time

Ministry of Justice

Deputy Chief Information Security Officer (CISO)

The MoJ Information Security Team sits at the heart of the Ministry of Justice. We enable good security practices through the provision of security policies, guidance and education, understand information security risks from all parts of the organisation and provide assurance to senior leaders that these risks are being effectively managed in the delivery of MoJ’s objectives.

As the Deputy CISO you will help to coordinate the Office of the CISO within the MoJ Information Security Team and will be empowered to act as the MoJ CISO when the CISO is unavailable. The Deputy CISO will provide advice and guidance on security issues for the MoJ, working with senior leaders across the department, and supporting our team as we work with different boards and committees.

One of the largest parts of your role will be in security education awareness and culture, helping to drive a positive and just security culture across the entire department. You will lead the development and rollout of pragmatic security guidance and standards, and ensure these are adopted department-wide, working closely with the Government Security Group in the Cabinet Office, and with other partners, to achieve this.

You will also be responsible for providing security support to MoJ colleagues, suppliers and third parties as they have security queries on any aspect of our work. A significant part of your role will be about relationships – ensuring we have effective security partnerships across the different MoJ agencies and public bodies, tailoring the provision of support to these entities to meet their bespoke and unique requirements. An important part of your work will be to increase our collective capacity for cyber security exercises and tabletop practices for different situations, and helping ensure these are used at the right point to build capability.

Related to this, you will support partnering activities with the wider sector, through groups like the Justice Working Group, ensuring that we are working effectively with entities like the GSeC, GSG and NCSC, as well as in collaboration with the CPS, AGO, and other related justice organisations. You will be the lead for Pillar 2 (Creating a Positive Security Culture) – and Pillar 8 (Securing the Justice Community) of the MoJ Cyber Security Strategy, through the security culture work you will lead on, as well as the wider sectorial support.

You will be part of the MoJ Information Security Team’s senior leadership team and will be an important part of the Security and Information Group’s leadership community. You will also work closely with the Government Security Group in the Cabinet Office, and the National Cyber Security Centre – helping to benefit from their expertise and sharing our team’s work with others across HMG.

All members of the team are expected to help develop the MoJ Security Function as a centre of expertise for the department and to contribute to building a brilliant and diverse team that is a welcoming place for all.

MAIN RESPONSIBILITIES

• Be a member of the MoJ’s security leadership team, setting the direction for the area as a whole and representing the entire area (beyond your local team) at corporate events, deputising for the CISO as required.
• Leading a small team of information and cyber security specialists, prioritising work, and developing and implementing a team strategy – helping to focus our resources where they will bring the biggest benefit in improving the department’s cyber security.
• Provide high quality operational services, such as the security single point of contact, helping colleagues across the entire MoJ get swift resolution of their security queries, and enabling learning and improvement from it.
• Lead the team in developing alternative ways to communicate their expertise – such as via policy, guidance, blogs, training etc. – to help other teams do effective security themselves, and to enable the team to focus on the highest priority tasks.
• Lead the security culture programme to improve all aspects security culture across the MoJ.
• Engage effectively with other business areas and the MoJ’s public bodies to understand their security needs, and helping them to embed effective cyber security into their work, aligned to the MoJ’s cyber security strategy.
• Provide strategic input into material that supports security governance in the MoJ and across government including overseeing responses to data requests, preparing financial bids, providing updates to governance boards up to Executive Committee and contributing to agencies’ Audit, Risk and Assurance Committees’ discussions on cyber security.

CAPABILITIES

The essential skills and experience required are:

• Team leadership – an ability to inspire and coordinate a diverse team of security specialists, helping them to be their best both as individuals and as part of a wider team.
• Enabling and informing risk-based decisions – Work with team members to identify risks and communicate them effectively to decision makers.
• Specific technology and security understanding – with a good knowledge of system architectures.
• Communication – you will be an articulate and effective communicator across a range of formats.
• Analysis – Able to apply the approach to real problems and consider all relevant information.
• Understanding security implications of transformation – Can interpret and apply understanding of policy and process to assist the development of technical solutions or controls.
• Working knowledge of ISO 27001.

Behaviours

• Leadership
• Working Together
• Communicating and Influencing
• Seeing the big picture
• Developing self and others
• Managing a quality service
• Changing and improving
• Delivering at pace

Working Arrangements & Further Information

The MoJ offers Hybrid Working arrangements where business need allows. This is an informal, non-contractual form of flexible working that blends working from your base location, different MoJ sites and/or from home.

For nationally advertised roles, the successful candidate(s) will be appointed to a MoJ office location, which may include their nearest Justice Collaboration Centre or Justice Satellite Office.

Some roles will not be suitable for Hybrid Working.

For more information on applying for a role as a candidate with a disability or long-term condition, please see our Disability Confident Scheme Frequently Asked Questions webpage.