Purpose of the Post
Monitor the Security Assurance Programme to cover current and current technology threats across the Council
Coordinate and document effectively on Cyber Security compliance requirements, in accordance with security policies, Council standards and legislation where applicable, to industry best practice
Support all Council ICT Security accreditations
Report on, and document Cyber Security and Resilience Risks
Develop good relationships with technical and support staff to ensure systems and information needs are identified and met
Provide advice and guidance during project planning phases to ensure that Cyber Security and Robustness requirements are considered in the whole specification
Support, engineer and provide the second and third line skills and expertise for all hardware and software that includes council network security elements
Support the use of secure web access software for over 20000 users across the Corporate and Curricular sectors
Provide input on the security and resilience of the infrastructure and the ability to recover through successful incident response
Ensure that the digital field is supported in accordance with policies and procedures adopted by the Council and/or the Information Technology Service
When working as part of a team, identify where ICT can be used to create opportunities and efficiencies and improved Customer Care
Be responsible for ensuring that the Council's ICT tools and systems are working at all times
Ensure that the people of Gwynedd are at the heart of everything we do.
 
 Responsibility for functions  . e.g. staff, budgets, equipment
Staff:
Provide guidance and support to others in the service in the areas of ICT security
Can be a technical lead for security on Council technical projects
Be a technical resource for others in the department or Council
Monitor the work of others
Finance:
Be aware of budgetary structures and support project/contract constraints
Investigate into small/medium projects
Data/Tools/Software:
Have input into the Cyber Security aspects of all Council systems and provide technical support to any technical new projects
Input on any hardware or software used in the interests of protecting all Council systems and data
Have input into the security aspects of systems that have an impact on all of the Council and have a direct impact on the public (and make decisions about them)
Have responsibility for establishing and preserving the Council's firewall policies
Responsibility for the web usage filtering service
Develop and maintain ICT security objectives, strategy and policy
Ensure that such plans, policies and strategies are agreed across the Council
Ensure that all relevant documents are updated when changes are made
Liaise with individuals/external bodies to resolve complex iss
 
Main Duties
Decision making, organisation and innovation:
Proactively review compliance to Cyber Security standards
Respond to IT security incident(s), researching and analysing, documenting and reporting, including improvement recommendations.
Monitor for security violations, attacks or unusual activities, including identifying permissions abuses etc.
Identify new ideas and efficiencies about how ICT can create efficiency improvements, improve customer care or create new opportunities within its own function and within current projects and across the council as a whole.
Input into the decision-making process regarding supplier and product selection
Manage one's own highly complex and technical workload to meet targets.
Be able to do multiple tasks simultaneously.
Be able to strike a balance between project work delivery requirements and high pressure and adhoc support work to ensure they remain available to the Council's ICT systems.
Lead on policies and procedures, which he/she will be required to document.
Input into the business planning process.
Contribute towards ensuring that performance targets and improvement measurements are achieved or exceeded.
Communicate:
Excellent communication skills to communicate with users across the Council.
Write reports to Committees and/or forums within the Council, and report on Cyber Security performance.
Prepare presentations and deliver them to a varied audience, including Principal Officers, Members and external bodies.
Proactively work with Senior Officers, Heads of Department and others, ICT officers, Information Protection/Governance officers, and other relevant stakeholders across the authority and external entities/companies to ensure Cyber Security requirements are properly defined and ensure compliance.
Clearly document consumer requirements by contacting users at meetings and workshops
Develop and review conceptual and technical specifications.
Prepare and deliver training to the users.
Represent the ICT department externally and at meetings across the Council.
Provide advice and guidance to users and senior management.
Other:
Be able to solve problems on multiple levels.
Make suggestions to resolve complex and technical issues.
Can be a consultant to the business to improve applications and develop new ones.
Work on multiple tasks simultaneously.
Responsible for identifying risks in accordance with the ICT risk management framework and ensuring responsibility is taken for them.
Responsibility for self-development.
Ensure compliance with Health and Safety rules in the workplace in accordance with the responsibilities noted in the Health and Safety at Work Act 1974 and the Council’s Health and Safety Policy.
Operate within the Council’s policies in relation to equal opportunities and equality.
Responsible for managing information in accordance with the Council’s information management guidelines. Ensure that personal information is treated in accordance with Data Protection legislation.
Commitment to reducing the Council’s carbon emissions in accordance with the Carbon Management Plan, and to encourage others to act positively towards reducing the Council’s Carbon Footprint.
Undertake any other reasonable duty which corresponds to the salary level and responsibility level of the job.
Responsibility to report any concern or suspicion that a child or vulnerable adult is being abused.
 
Special Circumstances  . e.g. the need to work unsociable hours, special working arrangements 
As the Council's I.T. function operates on a 24-hour, 7-day-a-week basis, it will be necessary to work unsocial hours and weekends from time to time who will be eligible for payment in accordance with the Council's Terms and conditions of employment
Emergency calls will be the subject of a specific discussion