Senior Information Security Officer

About usInformation Services Division (ISD) is the primary provider of IT services to UCL. We support and enhance learning, teaching, research and administrative processes by providing information- and technology-related services to over 50,000 staff and students of UCL and associated institutions. Our goal is to be the leading IT services group in the HE sector and we are growing our team’s capability in experience/UX, agile development, security, cloud, service management and partnering.We are modernising our technology foundations, digitising the processes of the university to transform experience for students and staff, and partnering across the university to drive differentiation in UCL education and research. Portfolio and Product Delivery manage the delivery of technology led change, partnering with colleagues across UCL. We collaborate as cross functional agile teams and have core capabilities in experience, development & test, analysis and agile delivery management.About the roleWithin ISD, this post is in the Chief Information Security Office (CISO) which leads on all aspects of security at UCL. CISO is divided into two teams covering Security Operations and Governance, Risk and Compliance (GRC).You will work closely with stakeholders across UCL to provide expert advice on information security matters, support risk assessments and assurance activities, lead the development and improvement of policies and standards, and promote compliance with UCL's security framework in a pragmatic and solution-oriented manner. The role also includes providing leadership on GRC initiatives, mentoring colleagues, and helping to shape and strengthen UCL's overall security posture.About youAs the ideal candidate you will have a mix of the following skills and experience:Experience operating as part of an Information Security or Governance, Risk and Compliance team, providing advice, support and services to a wide range of stakeholders.Experience leading or contributing to security risk assessments, assurance reviews, audits, compliance activities or security governance initiatives.Strong knowledge of information security governance, risk management and compliance principles, with the ability to apply risk-based thinking to complex situations.Experience developing, reviewing or implementing information security policies, standards, guidance or frameworks.Excellent written and verbal communication skills, with experience producing reports and presenting information to both technical and non-technical audiences.Experience building effective relationships with stakeholders at all levels and providing pragmatic, customer-focused security advice.Relevant degree or equivalent professional qualifications and experience.What we offerAs well as the exciting opportunities this role presents, we also offer some great benefits some of which are below:41 Days holiday (27 days annual leave 8 bank holiday and 6 closure days)Additional 5 days’ annual leave purchase schemeDefined benefit career average revalued earnings pension scheme (CARE)Cycle to work scheme and season ticket loanImmigration loanRelocation scheme for certain postsOn-Site nurseryOn-site gymEnhanced maternity, paternity and adoption payEmployee assistance programme: Staff Support ServiceDiscounted medical insuranceVisit to find out more.Our commitment to Equality, Diversity and InclusionAs London’s Global University, we know diversity fosters creativity and innovation, and we want our community to represent the diversity of the world’s talent.We are committed to equality of opportunity, to being fair and inclusive, and to being a place where we all belong. We therefore particularly encourage applications from candidates who are likely to be underrepresented in UCL’s workforce.These include people from Black, Asian and ethnic minority backgrounds; disabled people; LGBTQI+ people; and for our Grade 9 and 10 roles, women.