ICT Security Specialist

1. To effectively plan and manage all Cyber security functions of the South Wales Fire & Rescue Service.
2. Develop and Train the Virtual Cyber Security ICT team and wider organisational staff to create effective Cyber risk prevention, incident detection and response capabilities.
3. To provide Strategic Management and technical leadership identifying development opportunities.

MAIN PURPOSE OF THE POST

To effectively plan and manage all Cyber security functions of the South Wales Fire & Rescue Service.

Develop and Train the Virtual Cyber Security ICT team and wider organisational staff to create effective Cyber risk prevention, incident detection and response capabilities.

DUTIES AND RESPONSIBILITIES

• To provide Strategic Management and technical leadership identifying development opportunities. Planning, implementing change and Integration across teams, and necessary business processes to develop an effective Cyber Security culture and response capability.
• Responsibility for security project management including project budgets through the complete project lifecycle. Undertaking proactive monitoring of costs, timescales and ensuring ICT resources are planned, scheduled, appropriately assessed for risks and impact in order to meet relevant project delivery deadlines, whilst maintaining a focus on service delivery.
• Responsible for the planning and implementation of security policies, procedures and processes, to ensure secure system provisioning and Head of ICT maintenance that is consistent with industry best practices, regulatory requirements and the ICT Strategy to ensure that a high-quality service is provided and maintained.
• Undertake Critical Incident Team (CIT) functions as directed in relation to the Organisations and Local Resilience Forums (LRF) Disaster Recovery Plans (DRP) including assisting developing such plans.
• Responsibility for any needed service accreditation against National and Welsh Government Security policies and guidance, including that from the NFCC, NCSC and CPNI e.g. Cyber Assessment Framework (CAF), Cyber Essentials, Information Assurance of Small and Medium Enterprises (IASME), ESN (Emergency Services Network), Airwave CoCo (Code of Connection) and to undertake and act on the findings of any IT Health Checks needed to achieve those.
• To track sources of intelligence including open and ‘FRS only’ available to ensure an up to date and timely management of emerging risks. E.g. through active membership in NCSC ACD, Cymru WARP, NFCC Cyber Group, CiSP, Cymru SOC and Microsoft M365 Threat Intelligence.
• To co-ordinate security project work packages to other Team Managers.
• Responsible for the design, implementation, operation and maintenance of the Information Security Management System.