Head of Cyber Security

Up to £750/Day

Location: Lincolnshire, Hybrid working

6-Month Contract

Akton Resourcing are looking for a Head of Cyber Security to join the Lincolnshire County Council on an initial 6-Month contract with an immediate start.

Job Overview:

The Head of Cyber Security will be LCC's first senior dedicated Cyber Security resource. They will play a vital role in designing, enabling and delivering the Cyber Security plan and approach for Lincolnshire County Council. The role leads the security transformation and cyber security improvement plan.

We are looking for a leader and driver with the capacity to tackle complex security issues within a diverse operational and technology environment, with many public and private sector partners. You will have a strong technical background in a variety of roles evidenced through your career progression, but at the same time possess the business acumen and communication skills to breakdown and convey technical challenges to non-technical audiences.

You will be experienced in dealing with senior leaders and able to promote the value of risk based decision making and use your highly developed stakeholder management and interpersonal skills to negotiate successful outcomes to ensure our services can operate securely.

You will work with a team of hardworking and enthusiastic technical specialists across the technology domain both in-house and through delivery partners, and provide input to their security knowledgebase expertise and core skills.

You will be an evangelist and advocate for LCC cyber security and promote the right security behaviours across the organisation.

Main Responsibilities:

* Define and implement the cyber security strategy, roadmap and security improvement plan

* Assess the Cyber Security landscape for LCC and existing threats, vulnerabilities, and defences

* Drive a programme for the remediation of security vulnerabilities and improvements through LCC and partner delivery teams

* Take the lead for regular security health checks

* Provide expert advice and guidance on all cyber security related matters and ensure the wider technology teams are engaged and supported

* Manage and drive the security risk register

* Ensure our suppliers and vendors are appropriately assessed against our security controls frameworks and comply with our security standards and any certification claims

* Promote a culture of secure by design and left shift security throughout our project development lifecycle and delivery processes

* Support the agenda for our cloud first strategy and ensure any cloud solutions meet our security aspirations and requirements

* Take responsibility for incident management and lead our response to cyber security events, incidents and potential breaches

* Ensure our suppliers adequately monitor the IT estate for threats and alerts and are capable of responding to issues

Experience Required:

* Possesses relevant and current industry qualifications and certifications (e.g. CISM, CISSP).

* Educated to degree level in a relevant technical area or equivalent industry experience

* Security domain specific experience showing progression through a number of roles with increasing responsibilities

* Strong technical leadership, stakeholder management and communication skills

* Experience working in a public body, particularly a local authority would be advantageous

* Experience of working through matrix management of multi-disciplinary teams in complex infrastructure environments

* A strong technical background across Networks, Security, Firewall, Vulnerability Management, SIEM and EDR technologies

* Experience with cyber security concepts, such as Threat Modelling, Incident Response, Penetration Testing (external /internal)

* Advanced knowledge of cloud products and services e.g. Azure, Microsoft 365

* Emotionally intelligent and able to recognise and manage the needs and expectations of customers, both internal and external, whilst juggling priorities

* Excellent written and verbal communication skills with the ability to translate technical speak into easy to understand noncomplex language

* Able to engage with senior leaders to promote, and enable risk based decision making