Cyber Security Information Incident Team Associate

Reference number

Salary

Job grade

Contract type

Business area

Type of role

Working pattern

Number of jobs available

The Cyber Defence & Risk (CyDR) team plays an integral role in protecting the UK against external and internal cyber security threats to ensure that our Armed Forces have the strong cyber defences they need. We are responsible for enabling Defence operations and capabilities, providing specialist cyber security services across UK Defence (including industry) and working our international allies.

About us:

Defence Digital ensures our Armed Forces remain among the most technologically advanced in the world. We do this by putting innovative and effective technology into the hands of over 200,000 users, from the boardroom to the front line.

We lead on cutting-edge data science, automation, and cyber security at scale. Our mission goes beyond the battlefield by leading humanitarian efforts and driving digital innovation that impacts lives across the globe.

Defence Digital forms part of Strategic Command which manages the MOD’s joint capabilities for the Army, RAF, and Royal Navy.

• Watch to find out more about what we do.

Passionate about using your skills to make a critical difference? Your next career move could be here.

This position is advertised at 37 hours per week.

This position sits within the recently established Threat & Information Security Team, part of the wider Cyber Defence and Risk (CyDR) Directorate.

The CyDR Information Incident Team Associate will work within a team responsible for initial responses to information security incident notifications, escalating where required and producing status and post incident reports. You will also highlight trends, to aid both future capabilities and incident response and on longer-term patterns of incidents received, such as emerging patterns of malicious activity.

Responsibilities

Incident management

• Manage the CyDR response to cross domain information security/loss incidents. Oversee the processing of information security incidents and their onward reporting in line with policy and legislative timelines.
• Manage investigation direction. Pursue security incidents to closure in accordance with the relevant policy and processes.
• Ensure all legal requirements are met in relation to the compromise of personal data.

Lessons, analysis & data

• Lessons analysis for information security incidents, communicating the results of investigations and risk mitigation outcomes. Support Defence intervention activities and information security culture improvement activities.
• Ensure mandated data is recorded in the Defence incident management system in accordance with Defence policy. Gather accurate statistical data in relation to security incident reporting.

Meetings and relationships

• Preparation of responses to Subject Access Requests (SARs), Freedom of Information (FOI) requests, Ministerial Questions (MQs), Parliamentary Questions (PQs) etc. in relation to information security incidents.
• Build and maintain relationships with relevant organisations across Government.

This role may be suitable for someone with previous experience of working in an environment where you have triaged and/or assessed security or critical incidents, in areas such as Cyber, physical, personnel or information assurance.

Previous experience or technical knowledge can help but we’re looking for the core skills and the motivation and ability to learn, so we can support your continuous development in the role. We’ll provide opportunities to maintain or gain industry qualifications, certifications or memberships where required.

Ideally, you’ll also have the following skills:

• Acute attention to detail.
• Great organisation, timekeeping and prioritisation skills.
• Able to keep calm under pressure and use your initiative and analytical skills.
• Personable, task focused and able to build relationships with the core team and wider colleagues.
• A passion for security and technology and identifying and solving problems.
• Motivation, commitment and the desire to continue to learn and develop.
• Ability to work in a fast pace, demanding environment.
• A degree in IT, Cyber Security or a related subject or equivalent experience may be beneficial.

Additional details:

A Recruitment and Retention Allowance (RRA) of up to £9k per annum may be payable with this post, paid in increments upon reaching the required level of competence.

This allowance is not permanent, it is subject to an annual review to confirm whether there is a continuing business need, it can be increased, reduced or withdrawn at any time.

There may be a requirement to travel within the UK (or potentially occasional overseas visits) for meetings, training or operational reasons.

If not already held, successful candidates will be required to obtain DV clearance prior to taking up employment. This position is open to sole UK nationals only.

Strategic Command is going through a significant transformation programme which aims to improve the way the Command conducts its business and delivers for Defence and the nation. As a consequence of this, all posts within Strategic Command Headquarters and in time the wider organisation, are/will be subject to review and potential changes as we continuously improve across the period of the transformation programme. These changes may be minor or could be more substantive and will generate new opportunities. Throughout, the Command’s transformation programme is committed to following the MOD’s framework on managing and supporting people through the change process and places an emphasis on early and open consultation and engagement with the Command’s personnel and Trade Unions.

We'll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Making Effective Decisions
• Delivering at Pace

We'll assess you against these technical skills during the selection process:

• Incident management, incident investigation and response
• Threat understanding

Our benefits include:

• Learning and development tailored to your role with a dedicated minimum of 5 days per year.
• 25 days paid annual leave rising (by 1 day per year) to 30 days upon completion of five years’ service.
• Ability to roll up to 10 days annual leave per year.
• In addition to eight public holidays per year, you will also receive leave for HM The King’s birthday.
• A Civil Service pension.
• Parental and Adoption Leave.
• Discounts on a range of services within and external to the civil service – Defence Discount Service, Civil Service societies for Sports and Leisure, Healthcare, Insurance, Motoring, Company discounts with Virgin, Vodafone, and Microsoft Office.
• In year rewards and ‘thank you’ schemes such as vouchers and gift cards.
• A culture encouraging inclusion and diversity.
• Find out more here - Discovermybenefits.

Equality and Diversity

Our people are at the heart of everything we do at Defence Digital. It’s vital that our workforce reflects the diversity of both our audience and the wider society in the UK, so we’re proud to be an equal opportunities employer and we actively seek candidates from diverse backgrounds and communities. We also recognise the importance of a good work life balance, so we do everything we can to accommodate flexible working, including part-time and job shares for all our roles. Please just let us know in your application or at any stage throughout the process if this is something you want to explore.

Defence Digital operates an organisation model in which every individual belongs to a Government Profession. The successful applicant will be posted into one of the defined Government Professions on Standard Terms of Reference for the grade. Defence Digital reserves the right to move individuals between roles, within their allocated profession, to meet the needs of the business and in support of agile resourcing.

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.

MOD Recruitment Satisfaction Survey – We may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Policy Notice sets out how we will use your personal data and your rights.

Job contact :

Recruitment team