Security Incident Response Officer
Department for Environment, Food and Rural Affairs
Apply before 11:55 pm on Thursday 3rd October 2024
Details
Reference number
Salary
Job grade
Contract type
Business area
Type of role
Information Technology
Working pattern
Number of jobs available
Contents
Location
About the job
Job summary
Defra is the UK government department responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. Our broad remit means we play a major role in people's day-to-day life, from the food we eat, and the air we breathe, to the water we drink.
Digital, Data Technology and Security (DDTS) is the trusted team for digital across the entire Defra Group.
We have around 1,200 colleagues across DDTS and our ambition is to make it easier and faster than ever for people to interact with Defra. If you are ready to drive innovation and push boundaries, we want to hear from you. Join us and together we will create a great place for living, and a green and healthy future for all.
Find out more about DDTS:
Job description
The role involves managing both volume security incidents as well as coordinating incidents with no clear guidance across the physical, personnel, information, and cyber security. There may be line management responsibilities as part of this role. No prior cyber security knowledge is needed. Key responsibilities include obtaining security related statements, compiling relevant papers for HR / legal teams where prosecution could be pursued, maintaining the integrity and continuity of evidence and subsequent case management.
Civil servants and Ministers must have confidence that information sent across the department is handled securely, and that should any information be disclosed to outside parties that a thorough, legally compliant proportionate investigation is conducted by a suitably qualified and experienced person. Failure to investigate leaks and security incidents could have serious consequences for Ministers’ and civil servants’ confidence in the department and increase the risk of sensitive information being released.
Limited travel and overnight stays are also expected.
Please note this post requires Security Check (SC) clearance. To gain (SC) clearance all applicants are required to have been a UK resident for a minimum of 5 years. If this requirement is not met, the individual will not be able to progress their application further.
Person specification
Responsibilities
- Developing Standard Operating Procedures with key stakeholders, creating a contacts database for use in a response, feeding into the incident management playbooks and response plan.
- Helping the response to major incidents, including assimilating available information, providing clear summaries to SEO and G7 staff, and running the logistics of the response (such as setting up calls, taking minutes of meetings, drafting dissemination/notification emails).
- Ensuring a high level of customer service for both DDTS/Defra and wider government departments.
- Helping investigations into security incidents, including creating and compiling evidence and providing clear recommendations to SEOs and G7s in the team.
- Triaging incidents, including monitoring an inbox where necessary - applying a clear knowledge of team scope and structure to ensure requests, incidents and other communications are dealt with appropriately.
- Capturing all appropriate information to effectively triage requests and incidents, including establishing whether incidents have Data Protection implications, and log incidents appropriately.
Skills and Experience
The role requires experience in managing security incidents / investigations and knowledge of different domains of the Security profession. Ensuring that security investigations are managed and led by a suitably qualified and experienced person reduces the risk of insider activity and its consequences in terms of Departmental and Cross-Government reputational harm. A background in Protective Security and should have one of the following, be currently on programme to achieve, or willing to achieve:
- BCS Certificate in Information Security Management Principles (CISMP),
- Certified Security Management Professional (CSMP),
- Certified Protection Professional (CPP),
- BCS Certified Information Security Manager (CISM) or equivalent qualification.
Or any other suitable Security or information security related qualifications.
- Experience of being part of an incident management and response team / function, including applying risk-based security controls in decision making and using security risk management methodology and techniques for the assessment and management of business and information risk.
- Experience of identifying and implementing service improvements (lessons learned) as a result of investigations.
- Experience communicating complex security related messages and presenting updates and recommendations in a clear and comprehensive manner to a senior audience.
- Working in an environment that can fluctuate between fast-paced and steady state, long-term projects with short-term, and high-energy responses.
- Experience helping investigations and delivering responses, able to deliver quality products at pace, communicate effectively and work as part of a geographically disparate team.
- Ability to build relationships with a variety of stakeholders, often with conflicting priorities. Excellent verbal and written communication skills.
Selection process
The Civil Service marks each element of the selection process on a merit basis. You can visit the gov.uk website for further information on the Civil Service rating scale.
Ensure you have tailored your CV and your Personal Statement to the 'responsibilities' and 'skills and experience' section of the job advert by providing examples on how you are suitable for the role. You may find the STAR method helpful when writing your personal statement.
For further information on STAR, you can check out our hints and tips document.
Application
As part of the application process, you will be assessed on your experience and will be asked to complete:
- A CV
- A 500-word personal statement: "Referring to the 'responsibilities and 'skills and experience' sections of the job advert, please demonstrate how you are suitable for the role by providing relevant examples."
Further details around what this will entail are listed on the application form.
Sift
Sift will begin shortly after the advert closes.
Should there be a large number of applications, an initial sift will be conducted using your personal statement.
Candidates who pass the initial sift may be progressed to a full sift, or progressed straight to assessment or interview.
Interview
If successful at sift stage, you will be invited to interview where you will be assessed on the following behaviours:
- Managing a Quality Service
- Changing and Improving
- Delivering at Pace
Interview dates are to be confirmed. Please note that these may be subject to change.
Interviews will be held virtually on Microsoft Teams.
For further information on Success Profiles, please use the links below and watch our videos on Defra Jobs.
Behaviours
Experience
Behaviours
We'll assess you against these behaviours during the selection process:
- Managing a Quality Service
- Changing and Improving
- Delivering at Pace
Benefits
- 25 days’ leave (rising to 30 days over 5 years) plus bank holidays
- A Civil Service pension with an average employer contribution of 28.97%
- A day off per year for the King's birthday
- Access to a range of retail discounts (these include supermarket, tech, gym, holiday, phone and more)
- Flexible working options such as condensed hours, part-time and flexi time
- 3 paid volunteering days per year
- Funding for professional membership of a recognised professional body
- Learning and development tailored to your role and budget for training or qualifications
- A culture encouraging inclusion and diversity
- Cycle to work scheme
- Health cash plan to help you manage health costs for a reduced monthly fee
- Access to the Employee Assistance Programme open 24 hours, 7 days a week, that provides support to you during any times of stress or difficulty
- Free access to Headspace for wellbeing
- Season ticket loan for public transport
Equality, diversity and inclusion (EDI)
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service D&I Strategy
Things you need to know
Selection process details
For further information on the selection process for this role, please refer to the person specification section of the job advert.
Near miss
Candidates who are judged to be a near miss at interview may be considered for other positions in Defra which may be at a lower grade, but have a potential skills match.
Reserve list
A reserve list may be held for a period of 12 months from which further appointments can be made.
Salary
New entrants to the Civil Service are expected to start on the minimum of the pay band. The internal roles rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest.
Location
As part of the pre-employment process for this post, successful candidate(s) will be able to agree a contractual workplace from those locations listed in this advert. The agreed contractual workplace is then the substantive and permanent place of work for the successful candidate(s).
Where the location is ‘National’ the successful appointee should discuss and agree an appropriate contractual location in line with both Defra’s location policy and site capacity, prior to proceeding with pre-employment processes.
Successful applicants currently employed by the hiring Defra organisation for this post may choose to remain in their current contractual location or may choose to change contractual location to one of those listed above. This should be discussed and agreed prior to proceeding with pre-employment processes.
The agreed amount of time spent at a workplace for this post will reflect the requirement for Civil Servants to spend at least 60% of their working time in an organisation workplace with the option to work the remaining time flexibly from home. Working time spent at a workplace may include time spent at other organisational locations including field-based operational locations, together with supplier, customer or partner locations. This is a non-contractual agreement which is consistent with common Civil Service expectations.
Travel costs to non-contractual workplaces will be subject to departmental travel and subsistence policies. Travel costs to contractual workplaces are the responsibility of the employee.
The successful candidate is required to carry out all their duties from a UK location, and cannot do so from an overseas location at any time.
Defra includes the core department, APHA, RPA, Cefas and VMD.
Our main Defra DDTS hubs are in York, Warrington, Newcastle, Reading and Bristol.
Please also be aware that space within the London office is restricted and it may not be possible to be based in this location.
NSV
For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting
Visa sponsorship statement
Please take note that Defra does not hold a UK Visa & Immigration (UKVI) Skilled Worker License sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship.
Reasonable adjustment
If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should:
- Contact Government Recruitment Service (GRS) via DefraRecruitment.GRS@CabinetOffice.gov.uk as soon as possible before the closing date to discuss your needs.
- Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a language service professional.
Accessibility
If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'contact point for applicants' section.
Criminal Record Check
If successful and transferring from another government department, a criminal record check maybe carried out.
In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstance some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-Employment.Checks@cabinetoffice.gov.uk stating the job reference number in the subject heading.
Internal fraud database check
Applicants who are successful at interview will be, as part of pre-employment screening subject to a check on the internal fraud database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.
A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.
Childcare Vouchers
Any move to DEFRA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk
Feedback will only be provided if you attend an interview or assessment.
Security
Nationality requirements
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Diversity and Inclusion
Apply and further information
Contact point for applicants
Job contact :
- Name : DDTS Recruitment Hub
- Email : ddtsonpayrollrecruitment@defra.gov.uk
Recruitment team
- Email : DefraRecruitment.GRS@CabinetOffice.gov.uk
Further information
Government Recruitment Services via email: defrarecruitment.grs@cabinetoffice.gov.uk
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: Click https://civilservicecommission.independent.gov.uk/contact-us/ to visit Civil Service Commission
