This is a practical, policy-facing role with university wide scope. You will develop and maintain information security policies, processes and procedures; support the response to security incidents; and contribute to the work of bringing our two merged estates into a coherent, ISO 27001-aligned framework.
You will liaise with regulatory bodies including and work alongside academic and research teams, including our Trusted Research Environments, to support compliance with data protection and security requirements for specific projects and bids.

You will hold a relevant professional certification eg. CISSP, CISM or equivalent and have solid, practical experience of information security management. A strong working knowledge of GDPR, ISO 27001, Cyber Essentials and NIST is required, along with direct experience of responding to information security incidents.
Experience of working in higher education is desirable, as is familiarity with NHS DSPT requirements. You will be comfortable communicating security matters to a range of audiences, from technical colleagues to senior stakeholders and research teams.