Senior Security Risk Analyst

Job Description

SummaryAt HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve.We want to maximise the potential of everyone who chooses to work forus and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you.Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with theexperience and skills needed to perform this role.The Security Analyst is responsible for the provision of advice and guidance to projects and business areas on security governance and assurance matters. Whilst not necessarily possessing in-depth technicalknowledge, they will have enough understanding of the security environment to be able to comprehend and explain risks.Working with others, including Solution and Technical Architects, Project Managers and Information Asset Owners, they are responsible forcompiling and maintaining the Security Risk Assessment (SRA) document and supporting security requirements, Business Impact Assessment (BIA) and Statement of Applicability (SoA). They will ensure that all significant risks are recorded in a project relatedrisk register (utilising the Risk Assessment Methodology (RAM) in most cases).They will ensure that they keep pace with the changes, Policy and Guidance and continually be scanning for new or changed risks. They will communicate key security requirements andrisks to VOA Businesses and help them understand how to mitigate them.They will act as a coordinator to other security specialists regarding: bulk data transfers; offshoring; 3rd party assurance; vetting; and physical security ensuring that the requirementsfor assurance in these areas is understood and processed accordingly. They will liaise regularly with the VOA Securitys SLT, ensuring visibility of risks and issues.We are looking for an influential team player who will take an active role in making changehappen, in extending the teams influence and building further on the teams existing strengths.This is an excellent opportunity to apply for the post of Senior Security Analyst who, as a member of HM Revenue & Customs (HMRC), will work with the ValuationOffice Agency (VOA) and HMRC, to enable VOA to continually develop, implement, and operate a proportionate security approach to manage their varied security activities spanning physical, personnel and cyber disciplines.Reporting to a Security Manager, yourprincipal role will be to provide expert explanation, advice, guidance and leadership to VOA stakeholders on how to achieve effective security within their varied business activities. You will work closely with the VOA Senior Leadership Team, including Estates,IT and HR to enable the outcomes to be met. You will also work closely with colleagues within Cyber Security and Information Risk (CSIR) enabling their expertise to be brought to bear where appropriate.The successful candidate will have a track record of workingwith ambiguity and be capable of leading at pace, keeping up momentum and identifying solutions in the face of difficulties. You will also lead on the development, introduction, operation and managing new assurance programmes. You will engage with internaland external stakeholders, utilising networks toJob descriptionDuties will include: Managing one or more HO level staff. Leading, as subject matter expert on several areas of security activity on behalf of the Security Manager. Providing advice and guidanceto VOA on specific security issues as they arise. Networking with VOA Business areas; CSIR teams; and other experts within the VOA security team to maintain an accurate overview of business change and ensuring that security policy is applied appropriately.You will be required to undertake a range of duties to support and cover other VOA Security Team members when required. Support the landing of Security standards and protocols. Ongoing responsibility for portfolio management in existing and new initiatives.ResponsibilitiesPersonSpecification; Highly developed organisation skills with the ability to prioritise tasks and see them through to completion in a fast-paced environment. Builds and maintains good working relationships with a wide range of departmental stakeholders. Exercisesdiscretion and sound judgement when dealing with highly sensitive issues. Is comfortable working under pressure and to tight deadlines and can make sound and well-judged decisions often with incomplete information. Can multi-task, prioritise urgent tasks.Comfortable working under pressure and to tight deadlines.Desirable Skills and Experience; A background in security. An understanding of Risk practices. Leadership Skills. CISMP. Management of Risk (MOR any level).You will hold SC level Clearance or be willingto apply and be successful in your application to remain in role (further details below).Training will be given. This post will require occasional travel and overnight stays, subject to COVID 19 restrictions.BehavioursWell assess you against these behavioursduring the selection process: Leadership Delivering at Pace Communicating and InfluencingBenefits Access to learning and development tailored to your role, particularly based around SANS. A working environment that supports a range of flexible working options.A working culture which encourages inclusion and diversity. A Civil Service pension. Labour Market Supplement (LMS) is payable to suitably qualified candidates, although if these are not met there will be opportunity to work towards it as part of the annualpersonal development plan (PDP). 22 days leave (pro rata for part time staff), which increases to 25 after a years service and 30 days after 10 years service.Team members that are moving offices as a result of the Locations Programme will be entitled toa Moves Adjustment Payment for three years where they incur additional costs. This is calculated based on the difference between the costs of travelling to and from the new and old office, over a weekly period. You will get more detail on this as part of targetedlocations move communications.Apply before 11:55 pm on Thursday 12th May 2022