Information Systems Security Engineer

Information System Security Engineer (ISSE)

In this role, you will be responsible for ensuring that departmental systems meet mandatory UK government security standards and providing the technical assurance necessary to keep our systems authorized for use.

What You’ll Do (Responsibilities)

• Framework Compliance: Ensure all digital services align with the NCSC Cyber Assessment Framework (CAF) and the Government Functional Standard for Security (GovS 007).
• Security Certification: Lead technical activities to achieve and maintain Cyber Essentials and Cyber Essentials Plus certifications across the estate.
• Vulnerability & Cloud Oversight: Utilize tools such as Tenable and Prisma Cloud to verify system patching, monitor AWS/GC configurations, and ensure alignment with UK data protection laws.
• Technical Risk Reporting: Translate technical findings into formal compliance reports and Secu...