M
Technology Services and Cyber Security Manager
Monkton
5 hours ago
Full-time
On-site
KA9, Monkton, South Ayrshire
£60,000 - £60,000 GBP yearly
Security
Anderson Knight is delighted to be partnering on a retained basis with our client Glasgow Prestwick Airport who are looking to appoint a Technology Services and Cyber Security Manager to Lead the front-line defence of Group networks and connected services, safeguarding information systems against unauthorised access, security breaches, and cyber threats, while delivering IT projects as required.
This is a key high visibility role that will Support the Head of Department in ensuring compliance with regulatory and statutory requirements relating to records management and data retention, including adherence to relevant public sector obligations and any directives issued by the Scottish Government. This role requires presence 5 days a week within Prestwick Airport.
Key Duties and Responsibilities:
Operational
• Create, update and deliver training to non-technical users to mitigate the human factor relative to network security.
• Audit and implement security improvements by assessing current situation, evaluating trends and anticipating outcomes.
• Implement all relevant policies and procedures with regards to cyber security.
• Audit group policy, processes, and procedures against cyber security frameworks to ensure compliance.
• Validate and update, where applicable, disaster recovery and business continuity processes.
• Prepare reports documenting security breaches and the extent of the damage.
• Design and develop group systems for cyber security best practice.
• Maintain all cyber security tools.
• Establish appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support.
• Regularly review the IT Departmental Risk Register and assist in ensuring effective mitigating control measures are in place to minimise the impact of the risks on the safety and wellbeing of the staff, and the continued operation of the business.
• Prepare any weekly and monthly reports.
• Implement policies and procedures for the effective use of computer systems within group.
• Responsible for improving technology security within group, identify opportunities and implement recommendations.
• Conduct and coordinate penetration / social engineering / vulnerability / web application / wireless assessments reviewing the outcome and implementing any change.
• Provide cover as part of the wider Engineering Systems Team currently a 1 in 4-week on call roster.
• To carry out any other reasonable duties as required, including assistance during winter operations, diversions, special events, etc.
(Secondary)
• Become familiar with and provide general 1st/2nd line reactive maintenance and support for IT systems across group estate, eg:
• Building Access Control / Physical Asset Monitoring Services
• Car Park Control Systems
• CCTV Systems
• Desktop / Laptop / Tablet / GSM Devices
• Emergency Comms & Facilities
• Network / Fixed Telephony
• Printers
• Physical & Virtual Servers and the Services Hosted Therein.
• Public Announcement and Information Display Systems
• Any other services that later fall under the remit of group Engineering Systems
• Provide support directly to the Engineering department relating to longer term projects, e.g.:
• Server and Systems Maintenance / Replacement
• System Installation, Testing, Evaluation and Commissioning
• Development and Maintenance of System Documentation
• Any other projects / systems work which may from time to time be requested by management
• Assist in the provision of technical services / support to a major emergency, incident or special event.
• Ensure all systems are comprehensively documented and the information properly archived.
• Follow appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support including change management.
• Keep up to date with developments in the industry and make recommendations to management for employing such developments where appropriate.
• Maintain backup systems for all stored information with consideration to sustainability.
• Maintain documentary records of all work in support of regulatory requirements examined by external authorities.
• Provide input to and assist with the creation and maintenance of policies and procedures for the effective use of technical systems across the estate.
• Provide on-call support on site / via VPN if required by the department to meet service delivery obligations.
• Provide out of hours support to ensure operational continuity and an integral response to an emergency incident / assist appropriately based on situations arising.
• Responsible for ownership of reported issues through to conclusion / appropriate escalation.
• Understand the roles of other teams and draw on expertise to resolve issues where appropriate.
Records Management
• To implement and maintain group Records Management Plan and associated guidance, policies, and procedures.
• Complete and implement their Publication Scheme, ensuring consistency against expected standards across all classes of information.
• To promote good records management and raise awareness of records management issues.
• To advise on retention and disposal periods and establish schedules.
• Identify and manage risks related to records management, escalating risks and issues to the HTSCSDC when appropriate.
Safety and Compliance
• To ensure knowledge and understanding of all appropriate safety responsibilities as detailed in the group policy Manual.
• Ensure you operate in a safe environment and demonstrate a clear understanding of Health and Safety policies and procedures.
• To minimise incidents and accidents within your area, promoting a safe working environment.
• To support and co-operate where necessary with investigations into accidents / incidents within the department in accordance with policies.
• To ensure data is processed and handled in accordance with the General Data Protection Regulation (GDPR)
Security
• To ensure knowledge and understanding of all appropriate security responsibilities as detailed in job description and other relevant policy documents.
• To ensure that standards set at security training courses are adhered to.
Key Performance Indicators
• To deliver against the KPIs established for your area.
• To focus on improvement initiatives to outperform against the business plan
Financial
• To deliver a quality service within the budget costs.
• To deliver within the capital investment plan.
Stakeholder Relationship
To interface with relevant internal and external stakeholders, positively promoting the business and ensuring an excellent service.
To apply for this position please follow the link
This is a key high visibility role that will Support the Head of Department in ensuring compliance with regulatory and statutory requirements relating to records management and data retention, including adherence to relevant public sector obligations and any directives issued by the Scottish Government. This role requires presence 5 days a week within Prestwick Airport.
Key Duties and Responsibilities:
Operational
• Create, update and deliver training to non-technical users to mitigate the human factor relative to network security.
• Audit and implement security improvements by assessing current situation, evaluating trends and anticipating outcomes.
• Implement all relevant policies and procedures with regards to cyber security.
• Audit group policy, processes, and procedures against cyber security frameworks to ensure compliance.
• Validate and update, where applicable, disaster recovery and business continuity processes.
• Prepare reports documenting security breaches and the extent of the damage.
• Design and develop group systems for cyber security best practice.
• Maintain all cyber security tools.
• Establish appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support.
• Regularly review the IT Departmental Risk Register and assist in ensuring effective mitigating control measures are in place to minimise the impact of the risks on the safety and wellbeing of the staff, and the continued operation of the business.
• Prepare any weekly and monthly reports.
• Implement policies and procedures for the effective use of computer systems within group.
• Responsible for improving technology security within group, identify opportunities and implement recommendations.
• Conduct and coordinate penetration / social engineering / vulnerability / web application / wireless assessments reviewing the outcome and implementing any change.
• Provide cover as part of the wider Engineering Systems Team currently a 1 in 4-week on call roster.
• To carry out any other reasonable duties as required, including assistance during winter operations, diversions, special events, etc.
(Secondary)
• Become familiar with and provide general 1st/2nd line reactive maintenance and support for IT systems across group estate, eg:
• Building Access Control / Physical Asset Monitoring Services
• Car Park Control Systems
• CCTV Systems
• Desktop / Laptop / Tablet / GSM Devices
• Emergency Comms & Facilities
• Network / Fixed Telephony
• Printers
• Physical & Virtual Servers and the Services Hosted Therein.
• Public Announcement and Information Display Systems
• Any other services that later fall under the remit of group Engineering Systems
• Provide support directly to the Engineering department relating to longer term projects, e.g.:
• Server and Systems Maintenance / Replacement
• System Installation, Testing, Evaluation and Commissioning
• Development and Maintenance of System Documentation
• Any other projects / systems work which may from time to time be requested by management
• Assist in the provision of technical services / support to a major emergency, incident or special event.
• Ensure all systems are comprehensively documented and the information properly archived.
• Follow appropriate working procedures to ensure the provision of a consistently high-quality level of systems implementation and support including change management.
• Keep up to date with developments in the industry and make recommendations to management for employing such developments where appropriate.
• Maintain backup systems for all stored information with consideration to sustainability.
• Maintain documentary records of all work in support of regulatory requirements examined by external authorities.
• Provide input to and assist with the creation and maintenance of policies and procedures for the effective use of technical systems across the estate.
• Provide on-call support on site / via VPN if required by the department to meet service delivery obligations.
• Provide out of hours support to ensure operational continuity and an integral response to an emergency incident / assist appropriately based on situations arising.
• Responsible for ownership of reported issues through to conclusion / appropriate escalation.
• Understand the roles of other teams and draw on expertise to resolve issues where appropriate.
Records Management
• To implement and maintain group Records Management Plan and associated guidance, policies, and procedures.
• Complete and implement their Publication Scheme, ensuring consistency against expected standards across all classes of information.
• To promote good records management and raise awareness of records management issues.
• To advise on retention and disposal periods and establish schedules.
• Identify and manage risks related to records management, escalating risks and issues to the HTSCSDC when appropriate.
Safety and Compliance
• To ensure knowledge and understanding of all appropriate safety responsibilities as detailed in the group policy Manual.
• Ensure you operate in a safe environment and demonstrate a clear understanding of Health and Safety policies and procedures.
• To minimise incidents and accidents within your area, promoting a safe working environment.
• To support and co-operate where necessary with investigations into accidents / incidents within the department in accordance with policies.
• To ensure data is processed and handled in accordance with the General Data Protection Regulation (GDPR)
Security
• To ensure knowledge and understanding of all appropriate security responsibilities as detailed in job description and other relevant policy documents.
• To ensure that standards set at security training courses are adhered to.
Key Performance Indicators
• To deliver against the KPIs established for your area.
• To focus on improvement initiatives to outperform against the business plan
Financial
• To deliver a quality service within the budget costs.
• To deliver within the capital investment plan.
Stakeholder Relationship
To interface with relevant internal and external stakeholders, positively promoting the business and ensuring an excellent service.
To apply for this position please follow the link