Cyber Security Compliance Officer
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role likely qualifies for a Skilled Worker visa
SOC 2135 (75% match) is an eligible occupation, with a going rate of £48,500, and Venesky Brown is a licensed sponsor. That is our reading of the rules. Whether they issue a Certificate of Sponsorship is still their call.
This could also be SOC 2439 (Business, research and administrative professionals not elsewhere classified., Information compliance officer focus on policy and governance) or SOC 2482 (Quality assurance and regulatory professionals, Compliance officer role emphasising regulatory audits). We read the code off the advert, so it is our best guess, not the employer's.
About the role
Venesky-Brown’s client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Compliance Officer for as soon as possible for an initial 3 month contract on a rate of £28.06/hour PAYE. This role will be hybrid working.
Responsibilities:
- Support the Head of Digital Governance on the implementation and maintenance of the Information Security Policy Framework, as an assessor for compliance with the Network and Information System Regulation (NIS) and assist in the maintenance of evidence submitted by departments for annual NIS audits conducted by the approved auditors.
- Advise and contribute to policies and procedures relating to Information Governance and security in safeguarding the confidentiality of personal data throughout the organisation.
- Support investigations and local response to Information and Cyber Security incidents which take place on computers, networks, information systems or contain data; liaising with Police Scotland, Counter Fraud Services, Central Legal Office, partner organisations and national intelligence agencies where appropriate.
- Develop and ensure effective implementation and understanding of Information Governance and ICT/eHealth policies e.g. Information Security Policy, e-mail acceptable use policy. Additionally, actively advise and contribute changes to policies of any other service areas to ensure they reflect legislative requirements in relation to Information Governance and security.
- Facilitate and influence changes to the working process and organisational culture within the organisation to meet Information Governance and cyber security objectives.
- To monitor and regulate the use of the internet, e-mail and cloud storage to ensure compliance and adherence with local polices and legislation and to make staff aware of policies regarding misuse of internet etc.
- Provide specialist advice, guidance and support to local service managers and accountable officers in their management roles, in all aspects of cyber and information security and associated legislation.
- Provide specialist advice in investigatory hearing that involves potential breaches in confidentiality, Computer Misuse Act, Data Protection Act 2018 and other information governance incidents.
- Conduct operational audits into all Security services and defence technologies, as well as others linked to partner organisations or suppliers e.g. cloud hosted information systems.
- Assist in the maintenance of the Incident Response Plan and Cyber Awareness Strategy as part of requirements of the Cyber Resilience Framework.
- Be a member of the Board’s Information Governance Group ensuring services have appropriate opportunities to participate and are kept fully informed of the organisation’s policies, protocols and guidance in relation to Information and Cyber Security.
- Assist in the design, scoping and review of cyber security testing of the organisation’s infrastructure, services and products e.g. penetration testing of networks by a third party.
- Carry out any other duties as required.
Essential Skills:
- Educated to degree level or equivalent
- System Security Certified Practitioner (SSCP) or evidence of working towards it
- Information Systems Security Professional qualification (CISP) or evidence of working towards it
- Evidence of relevant continued personal development
- Experience of maintaining an Information Security Management System (ISMS)
- Knowledge of Incident Response and Analysis
- Demonstrable experience of managing information/cyber security applications and risks in a related area either in service industries or commerce
- High level of knowledge in the use of Microsoft Office suite and Microsoft 365
- Advanced computer skills and proficiency in use of electronic system
- Good presentation, communication and interpersonal skills
- Experience of health service information systems
- Record of working successfully across professional boundaries
- Good team player
- Ability to work autonomously under own initiative
- Well organised and able to work under pressure delivering high quality outputs in constrained timescales
If you would like to hear more about this opportunity please get in touch.
This description is the source posting as it read when we added it. We are not affiliated with Venesky Brown, so check their own site for the current details.
Where this offer sits in the market
SOC 2135 · UK · ONS ASHE 2025 · ~26k in sampleSimilar sponsored roles
See all UK visa jobsNo close matches live right now.
Browse more sponsored jobs at Venesky BrownAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Venesky Brown holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.