Search
Header navigation
Cyber Security and Resilience Engineer x2

Cyber Security and Resilience Engineer x2

Gwynedd Council
locationCaernarfon
remoteOn-Site
ExpiresExpires: Expiring in 4 days
Full time
For further information about this post please contact David Gwyn Jones on 01286 679605 or via e-mail davidgwynjones@gwynedd.llyw.cymru

Purpose of the Post

  • Monitor the Security Assurance Programme to cover current and current technology threats across the Council
  • Coordinate and document effectively on Cyber Security compliance requirements, in accordance with security policies, Council standards and legislation where applicable, to industry best practice
  • Support all Council ICT Security accreditations
  • Report on, and document Cyber Security and Resilience Risks
  • Develop good relationships with technical and support staff to ensure systems and information needs are identified and met
  • Provide advice and guidance during project planning phases to ensure that Cyber Security and Robustness requirements are considered in the whole specification
  • Support, engineer and provide the second and third line skills and expertise for all hardware and software that includes council network security elements
  • Support the use of secure web access software for over 20000 users across the Corporate and Curricular sectors
  • Provide input on the security and resilience of the infrastructure and the ability to recover through successful incident response
  • Ensure that the digital field is supported in accordance with policies and procedures adopted by the Council and/or the Information Technology Service
  • Be responsible for ensuring that the Council's ICT tools and systems are working at all times

Main Duties

  • Proactively review compliance to Cyber Security standards
  • Respond to IT security incident(s), researching and analysing, documenting and reporting, including improvement recommendations
  • Monitor for security violations, attacks or unusual activities, including identifying permissions abuses etc
  • Input into the decision-making process regarding supplier and product selection
  • Lead on policies and procedures, which he/she will be required to document
  • Write reports to Committees and/or forums within the Council, and report on Cyber Security performance
  • Prepare presentations and deliver them to a varied audience, including Principal Officers, Members and external bodies
  • Prepare and deliver training to the users
  • Provide advice and guidance to users and senior management

Responsibility for functions

  • Provide guidance and support to others in the service in the areas of ICT security
  • Can be a technical lead for security on Council technical projects
  • Have responsibility for establishing and preserving the Council's firewall policies
  • Responsibility for the web usage filtering service
  • Develop and maintain ICT security objectives, strategy and policy

Special Circumstances

As the Council's I.T. function operates on a 24-hour, 7-day-a-week basis, it will be necessary to work unsocial hours and weekends from time to time who will be eligible for payment in accordance with the Council's Terms and conditions of employment. Emergency calls will be the subject of a specific discussion.

Essential Personal Attributes and Qualifications

  • Need to be independent and able to make decisions on his own and as part of a team
  • Proactive in continuing to learn about the latest in a complex and rapidly changing industry
  • Owns full UK driving licence
  • Relevant Degree or Cybersecurity qualification (e.g. CISSP, CEH, CCSP, CISM)

Essential Relevant Experience

  • Experienced in engineering and supporting Security systems (eg firewall, antivirus software etc)
  • Experience using systems to identify and report Security vulnerabilities
  • Broad understanding of Security standards eg NCSC CAF, Cyber Essentials, NIST etc
  • Professional officer with broad experience in network support, maintenance and design
  • Experience in infrastructure analysis and design

Essential Skills and Specialist Knowledge

  • Knowledge of IT infrastructure, hardware, operating systems, wide area/local networks etc
  • Strong documenting skills, and ability to document reports to a technical and/or non-technical audience
  • Experience in Cyber Security management, including prevention, monitoring and detection of incidents, attacks, interventions and other unusual, illegal or malicious activities
  • Detailed knowledge of wireless equipment and switches with the ability to set up, configure, maintain and support them
  • Ability to set up, configure, maintain a firewall

Essential Language Requirements

Gwynedd Council operates internally through the medium of Welsh, and offers all its services bilingually. The applicant will be required to reach the linguistic level noted as one of the essential skills in the Person Specification.

Desirable

  • Professional qualification
  • Cisco qualification CCNA, CCNP or similar
  • Microsoft Qualification
  • Experience in policy and procedure development
  • Experience supporting some of the main IT infrastructure systems used by the Council
  • Information Security and ISO27001
  • Microsoft Active Directory, PowerShell, Group Policy, backup systems, data centre technologies, and disaster recovery / business continuity technologies

For further information about this post please contact David Gwyn Jones on 01286 679605 or via e-mail davidgwynjones@gwynedd.llyw.cymru