About this role
This vacancy is only available to existing Civil Servant employees and employees of accredited non-departmental public bodies (NDPBs). Please review the "Eligibility" section before you apply.
### Salary
The national salary range is £35,335 - £37,847, London salary range is £40,014 - £42,859. Your salary will be dependent on your base location
Job description
Job Title: Information Security and Data Protection Manager
Grade: HEO
Directorate: Cyber Security
Location: National
Contract Type: Permanent
Working Pattern: Full-time/ Flexible Working
Successful applicants will be expected to be office based 3 days per week in any HMCTS Office (subject to business availability)
Introduction
HM Courts & Tribunals Service (HMCTS) is responsible for the administration of criminal, civil and family courts and tribunals in England and Wales. Our roles support our service users and colleagues, where people and businesses access potentially life-changing justice. We’re looking for individuals who are committed to public service and want to make a difference in people’s lives in delivering justice. If you’re interested in developing a career with a real purpose, please apply.
Job Description
As Information Security and Data Protection Manager you will be responsible for supporting the delivery of information security and data protection objectives. You will be responsible for supporting HMCTS to meet its obligations under data protection and information legislation including UK GDPR, Data Protection Act 2018, Public Records Act 1958 and relevant MoJ/HMCTS data protection and information security policy frameworks. You will support with the maintenance and update of the Information Security Management System (ISMS). As Information Security and Data Protection Manager you will support with security assurance activities, including audits, reviews, risk assessments, and compliance monitoring. You will work with a range of stakeholders including the MoJ Data Protection Team (DPT), Data Incidents Team, Service Owners, Information Asset Owners, delivery teams, digital and technology colleagues, and cyber security specialists. You will help identify and mitigate information security, and data protection risks early and provides general data protection and information security advice, to support a culture of excellence and transparency in how personal data and information is managed across HMCTS.
In this role you will
Your role as Security and Data Protection Manager will encompass several key responsibilities listed below (but not limited to):
- Supporting the effective maintenance and operation of the Information Security Management System (ISMS)
- Delivering assigned security and data protection improvement activities to agreed timescales
- The provision of expert advice and support in relation to data protection and information security to a range of stakeholders across HMCTS ensuring accurate advice is provided and tailored to the needs of the audience
- Support stakeholders to identify when a DPIA/MOU/DSA is required to support the delivery of their business objectives whilst maintaining regulatory compliance
- Responsibility for making recommendations in relation to DPIAS, DSAs and MOUs and consulting with colleagues to ensure that there is an appropriate level of assurance and oversight
- Identify and escalation of recurring data protection and information security issues and propose improvements to guidance, templates and ways of working
- Produce clear management information to highlight volumes, risks and trends and other ad-hoc reporting as required
- Support the HMCTS Information Security Lead to develop and manage a quality service to stakeholders and monitor compliance with internal controls
- Collaborative engagement across HMCTS including the Data Incidents Team, Security Architects, Cyber Security Risk Teams, and Data Access Panel including maintaining a strong relationship with the MoJ Data Protection and Security Teams
- Support with assurance and compliance activities relating to data protection and information security in line with business plans and objectives
- Maintain information security policies, standards, procedures, and guidance, ensuring they remain current and fit for purpose
- Track and report on security risks, incidents, vulnerabilities, audit actions, and control effectiveness.
- Coordination of activity for DPIAs/DSAs and MOUs, maintaining records of status, approval and reviewing for clarity, completeness and proportionality ensuring risks and mitigations are clearly articulated and requesting additional information or clarification as required
- Coordination of the HMCTS data protection shared mailbox ensuring that all emails are dealt with in a timely manner including assigning emails to other team members and escalation or redirection as required
Essential skills
- Experience working in information security, data protection, governance, risk, compliance, or a related field
- Working knowledge of legislative requirements such as the UK GDPR, Data Protection Act 2018 and Public Records Act
- Experience supporting the delivery of information security risk or compliance improvement activities
- Provision of clear advice and support to non-technical stakeholders
- Proven communication skills with the ability to explain risks, impacts and mitigations clearly and proportionately
- Ability to manage multiple pieces of work with good time management skills
- Experience of providing constructive challenge and feedback while maintaining positive working relationships
- Strong organisational and administrative skills with good attention to detail
- Experience of engaging and working with a range of teams and stakeholders to solve problems and provide strong outcomes
- The ability to compile information and reporting in an easy-to-understand manner and contribute to the continuous improvement of processes
- Understanding of information security risk management concepts.
The below criteria are desirable only. These will not be assessed throughout the recruitment process, but will be used in the event of tied scores between candidates
Desirable skills
- Experience of using One Trust or similar Governance Risk and Compliance Platforms
- Experience of DPIAS, MOUS and DSAS in practice
- Experience supporting audits, risk assessments, or compliance reviews.
- Knowledge of security frameworks and standards such as ISO 27001, NIST, CAF, Gov Assure 007
Application process:
Stage 1 - Sift:
To apply for this position, you must submit the following as part of your application:
- An anonymised CV , setting out your career history, key responsibilities and achievements. Your CV will be assessed against the essential criteria outlined within the Essential Skills section of this advert.
- A Statement of Suitability which should give us real life examples of how your skills and experience match those needed for this role. We recommend following the STAR (https://nationalcareers.service.gov.uk/careers-advice/interview-advice/the-star-method) format.
Should we receive a high volume of applications, a pre-sift may be conducted on the CV. Candidates who pass the pre-sift will be fully assessed on all the sift criteria.
Please access the following link for guidance on how to apply - Application Guidance
Stage 2 - Interviews:
Successful candidates who passed the sift will be invited to interview via Microsoft Teams. At interview stage, you will be assessed against the following - Strengths and Behaviours:
- Making Effective Decisions
- Delivering at Pace
- Working together
- Communicating and influencing
Details can be found under the interview stage assessment section on the advert.
For further guidance on the interview process please click here
Important information
Salary details
New recruits to the Civil Service joining MoJ are expected to join at the band minimum.
Existing Civil Servants applying on promotion, will usually be appointed on the salary minimum of the new pay band, or receive an increase of 10 percent on the current base salary, whichever is higher (This is restricted to the pay maximum of the new band).
Travel requirements
There will be a requirement to travel occasionally to any HMCTS site in line with business needs.
Proud to Serve. Proud to keep justice going.
Additional Information
Working Arrangements & Further Information
The MoJ offers Hybrid Working arrangements where business need allows. This is an informal, non-contractual form of flexible working that blends working from your base location, different MoJ sites and / or from home (please be aware that this role can only be worked in the UK and not overseas). All employees will be expected to spend a minimum of 60% of their working time in an office, subject to local estate capacity.
Some roles will not be suitable for Hybrid Working. Similarly, Hybrid Working will not suit everyone’s circumstances. Arrangements will be discussed and agreed with the successful candidate(s) and subject to regular review.
For nationally advertised roles: All successful candidates will be appointed to the nearest viable office nearest to their home postcode and on its respective pay scale. This will be at either a HQ building (subject to desk allocation, a Justice Collaboration Centre (JCC) or a Justice Satellite Office (JSO) – See Map . All employees will be expected to spend a minimum of 60% of their working time in an office, subject to local estate capacity).
For current MoJ employees, your base location will need to be changed to the nearest viable office (to your home postcode), either at a HQ building, JCC or JSO within the National Office Network and moved its location’s respective pay scale (any legacy arrangements/locations will need to be amended).
Some of MoJ’s terms and conditions of service are changing as part of Civil Service reform. The changes will apply to staff joining MoJ who are new to the Civil Service. Staff joining MoJ from other civil service employers will transfer onto the new MoJ terms if they are already on 'modernised' terms in their current post or onto 'unmodernised' MoJ terms if they are on 'unmodernised' terms at their current post. Details will be available if an offer is made.
MoJ candidates who are on a specialist grade, will be able to retain their grade on lateral transfer.
All candidates who are currently in receipt of Mark Time / Pay Protection should ensure they are familiar with the new policy on permanent and temporary promotion which can be found on the employee intranet.
Flexible working hours
The Ministry of Justice offers a flexible working system in many offices. Standard full time working hours are 37 hours per week. MoJ welcomes part-time, flexible and job-sharing working patterns, where they meet the demands of the role and business needs. All applications for part-time, flexible and job-sharing working patterns will be considered in accordance with the MoJ’s Flexible Working policy.
Benefits
The MoJ offers a range of benefits:
Annual Leave
Annual leave is 25 days on appointment and will increase to 30 days after five years’ service.
There is also a scheme to allow qualifying staff to buy or sell up to three days leave each year. Additional paid time off for public holidays and 1 privilege day. Leave for part-time and job share posts will be calculated on a pro-rata basis.
Pension
The Civil Service offers a choice of pension schemes, giving you the flexibility to choose the pension that suits you best.
Training
The Ministry of Justice is committed to staff development and offers an extensive range of training and development opportunities.
Networks
The opportunity to join employee-run networks that have been established to provide advice and support and to enable the views of employees from minority groups to be expressed direct to senior management. There are currently networks for employees of minority ethnic origin, employees with disabilities, employees with caring responsibilities, women employees, and lesbian, gay, bisexual and transgender employees.
Eligibility
Staff on fixed term appointments must have been recruited through fair and open competition.
Vacancies advertised “cross-government” are only open to all Civil Service employees and employees of accredited non-departmental public bodies (NDPBs) who were appointed on merit following a fair and open competition; or were appointed to a permanent post through an exception in the Civil Service Commissioners' rules.
Support
- A range of ‘Family Friendly’ policies such as opportunities to work reduced hours or job share.
- Access to flexible benefits such as voluntary benefits, retail vouchers and discounts on a range of goods and services.
- For moves to or from another employer or moves across the Civil Service this can have implications on your eligibility to carry on claiming childcare vouchers. You may however be eligible for alternative government childcare support schemes, including Tax Free Childcare. More information can be found on www. www.GOV.UK (https://www.gov.uk/help-with-childcare-costs/tax-free-childcare) or Childcare Choices (https://www.childcarechoices.gov.uk/) . You can determine your eligibility at https://www.childcarechoices.gov.uk/ .
- Paid paternity, adoption and maternity leave.
- Free annual sight tests for employees who use computer screens.
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles . Should you feel that the recruitment process has breached the recruitment principles you are able to raise a formal complaint in the following order
- To Transformative Business Services (0345 241 5359 (Monday to Friday 8am - 6pm) or e mail [email protected] (mailto:[email protected]) );
- To Ministry of Justice Resourcing team ( [email protected] (mailto:[email protected]) );
- To the Civil Service Commission (details available here (https://civilservicecommission.independent.gov.uk/recruitment/recruitment-complaints/) )
As a Disability Confident employer, MoJ are committed to providing everyone with the opportunity to demonstrate their skills, talent and abilities, by making adjustments throughout all elements of the recruitment process and in the workplace. MoJ are able to offer an interview to disabled candidates who meet the minimum selection criteria, except in a limited number of campaigns.
You will be able to request reasonable adjustments to the recruitment process within the application form. If you need additional help completing the application form, please contact the TBS Recruitment Enquiries Team.
For more information on applying for a role as a candidate with a disability or long-term condition, please watch our animated videos .
Diversity & Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .
Redeployment Interview Scheme
Civil Service departments are expected to explore redeployment opportunities before making an individual redundant. The MoJ is committed, as part of the Redeployment Interview Scheme, to providing opportunities to those who are 'at risk of redundancy'.
MoJ is able to offer an interview to eligible candidates who meet the minimum selection criteria, except in a limited number of campaigns. Candidates will not be eligible for the Redeployment Interview Scheme if they are applying on promotion.
Civil Service Nationality Rules
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window) https://www.gov.uk/settled-status-eu-citizens-families (https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.gov.uk%2Fsettled-status-eu-citizens-families&data=05%7C01%7Cchristopher.jeffery%40soprasteria.com%7C8a2293860362402c15da08dbf4cff146%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C638372946312587803%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=s%2BxUsev%2BGeeK%2FLgTUjpjfTJu%2FjpKQZ%2BQPJXNduvik3Q%3D&reserved=0)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window) https://www.gov.uk/government/publications/nationality-rules
Reserve list
A reserve list may be held for up to 12 months from which further appointments may be made for the same or similar roles.
Contact Information
MoJ:
If you require any assistance please call 0345 241 5359 (Monday to Friday 8am - 6pm) or e mail [email protected]
Please quote the job reference: 23825
HMPPS
If you require any assistance please call 0345 241 5358 (Monday to Friday 8am - 6pm) or e mail [email protected]
Please quote the job reference: 23825
Strengths will be assessed but these are not shared in advance. To learn more about Strengths and how they are assessed please click here (https://www.gov.uk/government/publications/success-profiles/success-profiles-strengths).
Use of Artificial Intelligence (Al)
Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.