Information Security Specialist – Information Security Risk Management

BBC

Package Description

Band: D
Salary: £58,798 – £88,197 depending on relevant skills, knowledge and experience.
The expected salary range for this role reflects internal benchmarking and external market insights.
Contract type: Permanent
Location: Salford (Dock House Floor 4), London Broadcasting House or any main BBC location within the UK – Hybrid 1-2 days a week in office.
Closing Date: 4th of March 2024

Due to the hybrid nature of the teams, we require the successful candidate to be based in one of the above BBC offices to work from the office one / two days per week

Our comprehensive benefits package includes:

• An employer pension contribution of up to 10%
• 26 days’ annual leave (based on full time hours) + Bank Holidays and the option to buy/sell additional days
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, discounted gym memberships and healthcare schemes
• Employee assistance and well-being programmes
• Learning and development tailored to your role. This could include industry recognised qualifications, coaching and mentoring
• An inclusive and diverse environment with opportunities to join staff networks including Women’s Network, National Disability Networks and many more.

Family friendly flexible working arrangements, such as hybrid working, flexi-time and compressed hours can be requested.

We welcome candidates from all backgrounds and especially welcome individuals from underrepresented groups.

If you require any reasonable adjustments at any time, please let us know by contacting us on with the job reference in the subject.

Introduction

A career in Information Security in the BBC offers a unique experience to support the BBC with its desire to inform, educate and entertain. In 2023 alone we have been instrumental in supporting large scale events such as the Kings Coronation and Eurovision as well as helping our colleagues continue to accurately report from high-risk areas across the globe. The BBC are committed to becoming the world’s first global, digital public service media organisation, with a creative, innovative culture admired worldwide, where the best people do their best work. It really is a great time to join us.

We are currently looking for an inquisitive, passionate professional to act as a Specialist and SME, potentially acting as a lead and developing one of our teams Officers and Junior Officers within the BBC’s Information Security Risk Management Team. Whether you have years of security experience and are looking for your first Specialist role or are already working at this level and have a keen interest and passion for security, this is a great opportunity to be an integral part of a great team.

Your main responsibilities will be to support the Head of Information Security in ensuring that data within the BBC is protected in accordance with the needs of the business and according to Information Security principles of confidentiality, integrity and availability, and to assist to deliver the Information Security Strategy for the BBC.

The role will be as a Risk Management SME, and potentially leading and developing Information Security staff within the Information Security Risk Management Team and be a point of escalation in order to ensure the Risk Management team is best placed to protect, advise and provide effective risk assessments to the wider BBC in the current threat landscape.

We offer a competitive package and are committed to providing relevant and invaluable training.

Interview process
Virtual interview – approx. one to maximum 1,5 hours of technical and values-based questions. Interviews week commencing 11 March 2024.

Main Responsibilities

InfoSec Risk Management Expertise

• Provide technical and tactical advice to InfoSec personnel, the wider BBC and its 3rd Party Partners.
• Act as the point of escalation, and where necessary the subject matter expert, for queries and concerns.
• Review Key Performance Indicators, metrics and operational reports delivered by 3rd parties to the BBC.
• Ensure that Information Security policies, standards, guidelines and contract clauses are applied across the BBC.
• Effectively support Incident response.
• Ensure all relevant documentation provided to the team is reviewed and managed in a timely manner.

Team Development

• Manage, develop and lead Information Security Officers and Junior Officers within the Information Security Risk Management team, providing support, guidance and direction.
• Foster strong personal development skills, particularly the ability to learn new skills and impart learnings to the team.
• Support staff to develop their own internal BBC networks and foster an understanding of the culture of the BBC.

Stakeholder Management

• Manage relationships with teams across the BBC and the 3rd Party Partners delivering services to the BBC to resolve security threats and maintain secure systems.
• Communicate issues, risks, and delays in a timely manner to ensure impact to the business is minimized.
• Promote the Information Security Risk Management team across the wider Information Security Team and the BBC as a whole.

Are you the right candidate?

We don’t expect every candidate to meet all of our requirements, but this is an Information Security Specialist role with expected subject matter expertise, not an entry level role. It is not suitable for candidates with no previous experience in Information or Cyber Security.

Essential

• High level of experience of Information Security implementation, development or operations.
• High level of experience of Information Security Risk Management.
• High level of understanding of the technologies and architectures used to support information security.
• Proven track record of operating in time critical, diverse corporate environments.
• Extensive experience of managing the relationships with key personnel both within Information Security, the BBC and 3rd party partners
• An excellent understanding of the culture and ethos of the BBC.
• An excellent ability to communicate at all levels of the business.
• A proven ability to manage and resolve competing and diverse demands between technical and business directives.

Desirable

• Excellent written and verbal communication and presentation skills.
• Highly effective and creative problem-solving skills.
• Proven experience overseeing multiple projects simultaneously.
• Excellent understanding of technical systems and processes in use within the BBC.
• Understanding of the multiple roles within the BBC Information Security Team.
• Formal Information Security qualifications, or willingness to pursue such qualifications, in particular CISM or CISSP, Cyber Security Degree
• Understanding of the guiding principles behind ISO27001 and related standards.
• Experience of working with multiple stakeholders.
• Highly effective and creative problem-solving skills, across a broad range of scenarios.
• Confidence to make decisions where appropriate and to ask for assistance when necessary.
• Ability to manage multiple tasks and workstreams effectively and prioritise them accordingly.
• Be self-tasking and able to work on own initiative with minimal supervision.

About the BBC

The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC for different reasons and they will be given priority consideration ahead of other applicants. Priority consideration means for those employees seeking redeployment their application will be considered alongside anyone else at risk of redundancy, prior to any individuals being considered who are not at risk.

We don’t focus simply on what we do – we also care how we do it. Our values and the way we behave are important to us. Please make sure you’ve read about our values and behaviours here.

Diversity matters at the BBC. We have a working environment where we value and respect every individual’s unique contribution, enabling all of our employees to thrive and achieve their full potential.

We want to attract the broadest range of talented people to be part of the BBC – whether that’s to contribute to our programming or our wide range of non-production roles. The more diverse our workforce, the better able we are to respond to and reflect our audiences in all their diversity.

We are committed to equality of opportunity and welcome applications from individuals, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion and/or belief. We will consider flexible working requests for all roles, unless operational requirements prevent otherwise.

To find out more about Diversity and Inclusion at the BBC, please click here.