Cyber & Specialist Operations Command (CSOC) PSYA - SECURITY INCIDENT MANAGEMENT ADVISOR

Job summary

The Security Incident Management Advisor role is part of a small, busy team comprising The Warning, Advice and Reporting Point (WARP). This is CSOC’s focal point for all security incidents within the Command. You will triage/ record incidents, direct investigations and move reports onward to relevant departments. You will carry out data/ trend analysis, identify lessons to influence policy and allow CSOC Sub-Commands to understand their strengths and weaknesses in security.

This post sits within the Principal Security Advisor (PSyA) team which provides advice to Commander CSOC (4*) on all security issues relating to the command, including advising on HMG and MOD security policy; evaluating security risks and protective measures; and strategic oversight of all security activities across CSOC sites, units, and personnel worldwide. In addition, advice, direction, and support are given to the constituent organisations as and when required.

The WARP is the main point of contact for all general security questions and is responsible for ensuring security messaging is disseminated to Sub-Commands and formations in varying threat environments around the globe.

Working in a mixed civilian and military team, you will need to be flexible and adaptable, able to act on your own initiative, and quickly develop good working relationships with a wide range of customers.

Being embedded within a team of security experts will enable you to gain a range of knowledge and experience of how security functions in a complex and challenging environment. With exposure to the functioning of Defence, HQ CSOC, and the constituent organisations, you will gain valuable knowledge and experience across a range of security specialisations.

This position is advertised at 37 hours per week.

Job description

You will directly assist the WARP Team Lead and PSyA by:

• Operating the CSOC Warning, Advice, and Reporting Point (WARP), the single point for the issuing

of security messages across CSOC and for the receiving of security incident reports via Security Incident reporting form (SIRF).

Triaging the security incidents and tasking the security investigations to relevant Sub-Command.

Managing the Incidents life cycle and making sure the incidents are brought to closure after successful investigations.

• Conducting statistical analysis, utilising Excel, and other tools, of the number and type of security

incidents in order to identify any patterns and trends.

• Assisting in the management of investigations into security breaches, incidents, and near misses

and to ensure that lessons are learned, and improvements made to mitigate against re-occurrence.

For example, this can include but is not limited to incidents concerning.

• Loss (of, for example, classified information, personal information, ID cards)
• Theft (of, for example, classified information, personal information, keys to secure office)
• Breach of security policy
• Incorrect transmission of classified information
• Insecure classified information (security cabinets/offices left open)
• Security incident concerning MOD Computer Networks
• Hostile Reconnaissance
• Intrusions onto Defence Property
• Loss/Theft/Recovery of Items Attractive to Criminal and Terrorist Organisations (ACTO)

• Assisting in delivering and fostering a strong security culture across the command, which values, protects,

and enables CSOC and wider Defence.

• Assisting team members on a range of security enquiries, tasks, or projects.

• Providing an office management function to ensure that requests for security advice are triaged in a timely manner and passed to the appropriate team member.

• Assisting in the general functioning and administration of the team.

• Some UK travel may be required.

*Note - Participation in the out-of-hours duty roster is required on a rotational basis.

Person specification

The position requires an enthusiastic individual with strong interpersonal, organisational and collaborative skills to be part of a small but highly motivated and energetic team.

The post holder will be required to prioritise and manage a busy workload and high volume of throughput, whilst balancing business needs.

The ability to understand the nature and severity of security breaches/ incidents, apply a triage process and direct counter compromise, impact assessment and investigative activity is therefore essential.

The post holder must be suitably qualified and experienced to make sound breach management assessments and judgements, utilising all available information to ask the right questions and direct the correct response actions within specified timescales.

The WARP utilises a cross-government incident management system and the post holder will be required to input and extract data, upload reports and other relevant document sets and maintain oversight of the status of incidents through life to closure.

This post is only applicable for Sole UK nationals

Behaviours

We'll assess you against these behaviours during the selection process:

• Delivering at Pace
• Leadership
• Managing a Quality Service
• Making Effective Decisions

We only ask for evidence of these behaviours on your application form:

• Delivering at Pace
• Making Effective Decisions

Benefits

Alongside your salary of £30,740, Ministry of Defence contributes £8,905 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%
• Excellent on-site facilities

Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work in another MOD workplace, will also count towards this level of office attendance. Applicants can request further information regarding how this and other flexible working arrangements may work in their team from the Vacancy Holder (see advert for contact details). Defence Business Services cannot respond to any questions about working arrangements.

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at