Information Governance Officer bei High Speed Two (HS2) Limited

Grade 16 - internal promotions will be aligned to the pay policy.

HS2 Ltd endeavours to ensure everyone working for us and with us feels included, thrives and achieves their full potential. In practice, this means we are positive and inclusive about making adjustments, providing flexible working, encouraging our staff networks to flourish and providing personal and professional development opportunities. 

As the Information Governance Officer you will safeguard HS2 as it expands the scale and scope of its information applications and systems and ensure that it delivers an 
Information System that manages risk and meets government and legal obligations for information security. This role is specifically for Information and Cyber Security 
Incidents, reported across all incident reporting systems and Business Partner across HS2 for Information Communication and Education essential in compliance to ISO
27001:2022, Security Policy Framework, and other Information and Cyber Security standards (including latest versions) as required by DfT and to ensure Best Industry 
Practice is followed and risks managed.

About the role:

• Develop strategy for Information and Cyber Security Education and Communications
• Develop Information and Cyber Security training and learning offers for HS2, in line with Policies and Procedures - Confidentiality Integrity and Availability of Information. 
• Present to business and auditing external parties on Information and Cyber Security topics 
• Investigate information incidents, data breaches, and events, evaluate with team, and communicate with business and third parties as necessary 
• Work with Information and Cyber Security team members to ensure joined up approach for communicating with HS2 
• Work as an Information Ambassador and Digital Champion: assist HS2 colleagues/teams with their projects dealing with information management, information and cyber security, and data protection 
• Assist in educating all HS2 colleagues on the importance of Actively promote and embed Equality Diversity and Inclusion (EDI) in all your work, and support and comply with all organisational initiatives, policies and procedures on EDI.

About you:

Skills: 

• Communication and presenting often complex matters of Information and Cyber Security to non-specialist audiences 
• Designing and delivering training 
• Horizon planning for expected and unexpected change 
• Pragmatism and political awareness when investigating incidents 
• Relationship development with all areas of the business, an Information and Cyber Security Ambassador 

Knowledge: 

• Training needs analysis, fit-for-purpose training 
• Information Management systems across HS2 
• Incident investigation, reporting and response across the business
• Providing support to Cyber Security Audits, internal and external

Type of Experience: 

• Excellent presenting style and skills 
• Teaching
• Data Protection and requirements of Information and Cyber Security
• Evaluating change to organisations and advising on specialist training needs 
• Experience of ISO 27001 and HMG Information Security Policy Framework and supporting controls

The post-holder is expected to behave at all times in a manner consistent with the HS2 values of Safety, Leadership, Integrity and Respect 

We ask for a variety of detail in your online application, however we perform the first assessment of suitability for a role based solely on the information in your CV. In a further development of our efforts to create a more diverse workforce, your CV will be anonymised and personal information will be removed during the first stage of the application review. This removes bias from the process and makes it even more important that you attach an updated word version of your CV for each new application ensuring you include evidence directly related to the criteria in the job advert. Watch this video on how we remove bias in the recruitment process: Removing bias in the recruitment process - YouTube 

Any applications received after the closing date will not be considered. 
 

Company