Salary - £36,585 - £41,834 plus a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 month qualifying period
Location - Dundee or Glasgow
Hours - 35 hours per week
Closing Date - Monday 9th December 2024 at 23:55
Reference - 94
Employment Type - Permanent

Overview
As a Security and Information Risk Advisor, you will play a key role in providing expert guidance on implementing robust cyber security measures to ensure the integrity, availability, authenticity, and confidentiality of critical information. Collaborating with the Security Risk and Assurance Manager, you will monitor compliance, conduct risk assessments, and work with Security Architects and the Chief Digital Office to identify vulnerabilities and strengthen security protocols.

If you have a solid understanding of cyber security and a passion for digital risk management, this position offers a chance to contribute to Social Security Scotland's mission, ensuring secure services for the public while advancing your career and making a community impact.

DDaT Pay Supplement
This post attracts a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 months DDaT competency qualifying period. The payment will be backdated to your start date in the role. Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review. This post is part of the Scottish Government DDaT profession. As a member of the profession you will join the professional development system, currently BCS RoleModelplus.

Main Duties
Provide advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards.
Obtain and act on vulnerability information and conducts security risk assessments and business impact analysis on complex information systems.
Investigate major breaches of security, and recommend appropriate control improvements.
Contribute to development of information security policy, standards and guidelines.
Interpret information assurance and security policies and applies these in order to manage risks.
Provide advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines.
Use control testing information to support information assurance assessments.
Contribute to the development of policies, standards and guidelines.

Additional duties:
Liaison with and support of other Digital Risk and Security functions.
Management of problems and issues, resolutions, corrective actions, and lessons learned.
Collection and dissemination of relevant information and risk management advice.
Collection of feedback from customers in order to develop and enhance customer and stakeholder relationships.
Supporting the assessment of third party suppliers’ control environments.

Further Information
Social Security Scotland are a Disability Confident Employer. We will consider and implement any reasonable adjustments you may require throughout the recruitment process and during the course of your employment, should you be successful in securing a post. If you feel you may require assistance with any part of our recruitment process, please contact us at Recruitment@socialsecurity.gov.scot.

Salary - £73,757 - £85,130
Location - Dundee or Glasgow
Hours - 37 hours per week
Closing Date - 10th September 2024 at 23:55
Reference - 2024-9772
Employment Type - Permanent

Overview
Are you a seasoned data protection and information governance expert looking for a new challenge? We're seeking a skilled professional to join our team as Data Protection and Information Governance Lead for Social Security Scotland.

In this pivotal role, you will not only make strategic decisions that influence the data protection and information governance landscape across the organisation but also mentor and lead three sizeable specialised teams. This is an excellent opportunity for candidates who have detailed domain knowledge as well as experience leading large, diverse teams in complex environments. If you're passionate about data protection and information governance, have excellent leadership and management skills, and are ready to step into a senior role with substantial responsibilities, we would love to hear from you.

The Data Protection and Information Governance Branch is a critical part of the Data Office, working closely with the Scottish Government's Data Protection Officer under a Memorandum of Understanding. As the Data Protection and Information Governance Lead for Social Security Scotland, you will be responsible for leading the development and implementation of data protection and information governance policies, processes, and services. You will work closely with the Chief Data Officer, senior leadership, and other stakeholders to ensure the organisations’ compliance with statutory requirements and best practices in data protection and information governance.

You will manage and lead three teams setting direction and policy for these specialist areas and ensuring their effectiveness and performance for the organisation.

The Data Protection – (Corporate & Client) Teams responsibilities include:

• Evaluating and ensuring the organisations’ adherence to legal requirements
• Promoting a privacy-focused approach, evaluating privacy risks, providing advice on controls, and ensuring proper contractual agreements are in place for operational activities
• Developing and enhancing data protection policies, processes, services, and guidance
• Providing training for our staff
• Handling and resolving data breaches
• Facilitating individuals' information rights
• Monitoring and ensuring performance and compliance for the Chief Executive and Executive Team
• Cultivating a culture of ongoing improvement in data protection throughout the organisation.

The Corporate Records and Information Governance team:

• Oversee and implement the organisations’ Records Management Plan, in alignment with the Keeper of the Records Scotland.
• Manage the file plan and workspaces within the electronic records and document management system.
• Handle and respond to Freedom of Information (Scotland) Act requests to ensure legal compliance.
• Facilitate the proactive disclosure of information in the public interest on behalf of the Agency.
• Address inquiries related to UK General Data Protection Regulation information rights within statutory timelines.
• Process disclosure requests from third party competent authorities in accordance with relevant laws.
• Coordinate and execute Information Governance processes to uphold our policies.

Main Duties

• Serve as the Data Protection Officer for Social Security Scotland, offering guidance to senior leadership and collaborating with the Scottish Government Data Protection Officer.
• Cultivate and manage data protection and information governance partnerships with Scottish Government, UK Ministerial Departments, and Scottish Local Government.
• Develop a strategic approach for data protection and information governance, establish policies, processes, standards, and guidance in line with industry best practices, and ensure their ongoing effectiveness.
• Lead efforts to promote a privacy-focused culture within Social Security Scotland governance, emphasising privacy considerations in all data processing activities.
• Provide guidance and direction on data protection and information governance to technical, analytical, and non-technical staff, identifying risks and escalating issues to executives when necessary.
• Serve as a subject matter expert on data protection and information assurance for the organisation and broader central government community, offering authoritative advice on implementing and maintaining data protection and information governance controls.
• Stay informed on developments in data protection, information rights, and corporate records law, policies, strategies, and technologies, participating in professional development activities to enhance expertise.
• Supervise three senior leaders within the branch, each overseeing their own team responsible for Data Protection and information governance functions, supporting their professional growth and ensuring a balance between business objectives and employee wellbeing.
• Act as a stand-in for the Chief Data Officer when needed.

Further Information

Social Security Scotland are a Disability Confident Employer. We will consider and implement any reasonable adjustments you may require throughout the recruitment process and during the course of your employment, should you be successful in securing a post. If you feel you may require assistance with any part of our recruitment process, please contact us at Recruitment@socialsecurity.gov.scot.

Job title: Information Governance Lead
Salary: £55,530 to £61,314
Hours: 35 hours per week
Location: Flexible (Any Care Inspectorate office)
Contract: Permanent

About us
We are the national regulator and scrutiny body responsible for providing assurance and protection for people who experience care services, their families, carers and the wider public, as well as supporting delivery partners to improve the quality of care for people in Scotland. Our vision is that people across Scotland experience high quality care that meets their needs, rights and choices.

We are a scrutiny body that supports improvement. We inspect individual care services, and we also work with other scrutiny bodies to inspect the social care and social work services people are experiencing in their local areas.

Our desire is to achieve an effective and balanced way of working, that enables us to meet organisational needs and achieve a work-life balance that promotes wellbeing and collaboration opportunities. We are moving towards the expectation that all staff will work collaboratively, within and across teams, in person, for approximately 40% of their working week.

About the role
We are looking for a talented and experienced person to provide leadership in information governance and assurance, both internally and externally, ensuring our data protection, records management and wider information governance work is of high quality.

The post holder will provide the Care Inspectorate with leadership in information governance and assurance, internally & externally. They will be the prime source of expert advice and policy development, to create and maintain high level awareness, profile and understanding of the strategic and operational importance of information governance.

About you
You will play a key role in ensuring that the Care Inspectorate meets its statutory and legal obligations and be the prime source of expert advice and policy development to create and maintain high level awareness, profile and understanding of the strategic and operational importance of information governance. You will be capable of acting as a Data Protection Officer as defined under the UK General Data Protection Regulation (GDPR) 2018 and Data Protection Act 2018.

You will be responsible for overseeing important change programmes in how we manage, use and share information. We need applicants who are ambitious and motivated with a “can do” attitude.

You will be able to demonstrate considerable working experience in Information Governance. You will have excellent communication skills and an ability to engage with and understand the information needs of different audience types.

You’ll be able to support, develop and line manage staff, and have experience in data analysis, interpretation and management reporting.

We would welcome someone qualified as a solicitor, but that’s certainly not essential: your core skill may be in data protection or records management. Either way, you will have a detailed understanding of the requirements of the General Data Protection Regulation, Freedom of Information Act and other information-related legislation and regulations, with practical experience of helping organisations meet these requirements.

You will have the ability to liaise with internal groups, external partners and system suppliers to ensure IG requirements of projects, information systems and day-to-day operations are met.

Next steps
You’ll find more information in the job profile and person specification.

If you would like more information or an informal chat about the role please follow the link below that will take you to our website.

If you believe that you are a suitable candidate for this post, please download and complete an application form. You will find our application form by following the link below that will take you to our website. Applications should be submitted by email by 08:00 on Monday 29 July 2024.

Please also complete the equal opportunities form and submit along with your application.

It is anticipated that interviews will be held in person at our Dundee Office during week of 12 August 2024. https://www.careinspectorate.com/index.php/our-offices

What skills and experience we're looking for

We are a very well-equipped faculty with CNC machinery (3D routers, laser cutters and 3D printers) as well as a wide range of more traditional machinery. We provide state of the art facilities including extensive CADCAM rooms, electronics/3D printing room, lecture theatre and workshops.

Our curriculum includes teaching product design, electronics, and engineering to all age groups from 11-18 and occasionally to some of the primary school. The students at Liverpool College produce high quality products and solve real-life problems, frequently working with external clients, with many of our sixth formers progressing to university to study engineering, product design, construction and surveying or architecture.

To provide technical support to the teaching staff and students in the DT Department by the preparation of tools, equipment and materials for lessons and displays.

To undertake a practical health and safety role in the department.

To adopt and maintain high personal and professional standards in line with the high expectations of the faculty.

What the school offers its staff



On-Site Facilities: The college has on-site facilities, including a canteen with free hot meals for employees, and free access to the onsite gym as well as parking on a secured car park.



Professional Development Opportunities: The college is committed to the continuous professional development of its staff. They offer a range of training and development opportunities to support career progression.



At Liverpool College, we pride ourselves on being an inclusive workplace. We encourage and welcome applications from all backgrounds and aim to have a workforce that, at all levels, is representative of our school community. We champion equality, anti-racism, diversity, inclusion and wellbeing and aim to create a workplace where everyone feels valued, has a sense of belonging and is empowered to be their best.



Commitment to safeguarding

Liverpool College is committed to safeguarding and promoting the welfare of pupils. Successful applicants will be expected to undertake an enhanced DBS check. Liverpool College is an equal opportunities employer.

Library, Learning, Culture & Information Full-Time / Permanent Grade 7 (£36,024 - £44,263) Hybrid. We are looking for an experienced information governance practitioner to contribute to our compliance with information-related legislation.

The Information Governance Officer in University will assist in a wide number of projects and programmes featuring information governance considerations. They will assist in reviewing, maintaining, developing and managing information, guidance and processes for compliance assurance and risk management.

Your priorities will include:

• Managing and responding to requests under FOISA, EIRs and UK GDPR
• Ensuring the University manages its information in compliance with UK GDPR
• Assisting with updating of policies and processes
• Advising on good records management practice

For further information about this position please contact Caroline Brown, Assistant Director, LLC&. To find out more about Information Governance please visit www.dunde.ac.uk/information-governance .

The closing date for applications is 27 March 2024. We anticipate that interviews for this appointment will take place within the following few weeks.

This is a hybrid post and the post holder is expected to be on campus for some of the week.

The diversity of our staff and students helps to make the University of Dundee a UK university of choice for undergraduate, postgraduate and distance learning. Family friendly policies, staff networks for BME, Disabled and LGBT staff, membership of Athena SWAN, the ECU Race Equality Charter and Stonewall as well a full range of disability services, create an enjoyable and inclusive place to work.

Library, Learning, Culture & Information Full-Time / Permanent

Grade 8 (£45,585 - £54,395) Hybrid

This is an exciting opportunity to take a senior role in a busy information governance team. We are looking for someone with an understanding of the importance of the proper governance of information in a university setting and an in-depth knowledge of compliance legislation. You should have excellent communication skills and the ability to lead on embedding policies and best practice in Information governance Into the University's administrative,

teaching, research, and partnership activities.

Your priorities will include:

• Taking a strategic approach to embedding Information Governance in the University


• Leading on the updating of policies and processes


• Overseeing the work of the Information Governance Officers


• Ensuring best practice is followed in relation to legislative compliance and the management of records and data

We are one of the UK's leading universities, internationally recognised for our expertise across a range of disciplines and research breakthroughs in multiple areas, including science, medicine and engineering, amongst many others. Our purpose is to transform lives, locally and globally, which we do as a community of staff (Professional Services and academic Schools), students and alumni. Professional Services directorates are key to delivering the University strategy and driving change across the University. The Information Governance team is crucial to ensuring this work is compliant and efficient.

For further information about this position please contact Caroline Brown, Assistant Director, LLC&. To find out more about Information Governance please visit www.dunde.ac.uk/information-governance .

The closing date for applications is 27 March 2024. We anticipate that interviews for this appointment will take place within the following few weeks.

This is a hybrid post and the post holder is expected to be on campus for some of the week; alternative arrangement may be possible depending on circumstances.

The diversity of our staff and students helps to make the University of Dundee a UK university of choice for undergraduate, postgraduate and distance learning. Family friendly policies, staff networks for BME, Disabled and LGBT staff, membership of Athena SWAN, the ECU Race Equality Charter and Stonewall as well a full range of disability services, create an enjoyable and inclusive place to work.

We are looking for candidates with a strong track record in teaching and research, with a clear plan that articulates with and enhances our existing activities in the Centre for Medical Engineering & Technology, which is an interdisciplinary academic space between the School of Medicine and the School of Science & Engineering.

Candidates' research plans should align with one or more of the following areas: Biomedical Imaging & Image-Guided Intervention, Cardiovascular Engineering, Medical Instrumentation & Robotics. The successful candidate will contribute to our teaching of Biomedical Engineering to the Joint Education Partnership with North-Eastern University, China.

Your priorities will include:

• To carry out teaching and supervision at undergraduate or postgraduate level, including contributing to curriculum design and enhancement of the student learning experience. A commitment to international travel is required for this post; it is expected that there will be one or two trips to China each year, each of which will be between two and four weeks duration
• To publish research outputs that meet the highest standards of excellence in terms of originality, significance and rigour
• To develop appropriate opportunities to participate in interdisciplinary research and knowledge exchange with other academic or industrial partners

Whom we're looking for:

• PhD in Biomedical Engineering, Physics or a closely related subject
• Clear evidence of learning and teaching competence, commensurate with the grade
• Evidence of research of internationally excellent quality, including securing external research funding, commensurate with grade
• Ambitious research plans that are aligned to the Centre's research strategy and will be competitive for UK or international funding streams, and/or for industrial funding mechanisms

Salary - £43,725 - £52,353 (plus a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 month qualifying period)

Location - Dundee or Glasgow

Hours - 37 hours per week

Closing Date - 7th January 2023 at 23:55

Reference - 2023-7932

Employment Type - Permanent

Overview

This is an exciting role within Digital Risk and Security where you will be instrumental in helping to drive forward the implementation of an ambitious Security Assurance programme. Working with the Head of Security Assurance, the Security Risk and Assurance Manager and team, Security Architects and colleagues across the wider Chief Digital Office, you will help ensure the confidentiality, integrity and availability of corporate digital systems and benefit system releases.

You will also help to support the design and implementation of cyber security controls and measures for projects within Social Security Scotland. This is a high impact role which offers the successful candidate the opportunity of making a strong, significant and positive impact to those that rely on Social Security Scotland.

The Digital Risk and Security branch are responsible for developing and leading the strategic approach to managing security risk, and for developing the operational cyber security and physical and personnel security functions for Social Security Scotland.

The branch comprises two main areas; Security Operations and Security Assurance. The Security Operations teams are responsible for cyber operations, cloud security engineering, protective monitoring and engineering, and physical and personnel security. The Security Assurance teams are responsible for security risk and assurance, compliance management and security architecture.

DDaT Pay Supplement

This post attracts a £5,000 DDAT pay supplement after a 3 months DDaT competency qualifying period. The payment will be backdated to your start date in the role. Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review. This post is part of the Scottish Government DDaT profession. As a member of the profession, you will join the professional development scheme, currently BCS RoleModel plus

Main Duties

• Conduct regular security assessments to identify potential threats and vulnerabilities.
• Perform risk assessments, provide recommendations for enhancing the security posture of our systems and infrastructure and ensure activities are consistent with applicable regulations and legislation.
• Participate in Security Project Design, Procurement and Implementation activities.
• Collaborate with cross-functional teams to implement and maintain security measures.
• Stay up to date with the latest cybersecurity threats, technologies, and best practice.
• Maintain the desired cyber security posture in line with our risk appetite.
• Have experience of developing an Information Security Management system within a fast-paced environment
• Be involved in developing and maintaining incident response plans, including guidelines and procedures for responding to security incidents.
• Participate in incident response activities as needed.
• Provide cybersecurity awareness training to employees to promote a culture of security and to ensure risk or service owners can make well-informed and auditable decisions.
• Collaborate with external vendors and partners to ensure compliance with security standards and regulations.
• Development of Information Security policies, procedures and guidelines, and managing compliance.
• Leading and mentoring a small number of security staff.

Further Information

Social Security Scotland are a Disability Confident Employer. We will consider and implement any reasonable adjustments you may require throughout the recruitment process and during the course of your employment, should you be successful in securing a post. If you feel you may require assistance with any part of our recruitment process, please contact us at Recruitment@socialsecurity.gov.scot.