Information Security Advisor

Change Grow Live are a charity dedicated to the belief that we can make a difference to our Service Users lives, offering support and respect in a safe environment, treating each user as an individual and working with them to find the right treatment and care options.    

Our core values are ‘Be open, be compassionate and be bold’ and our team members apply these daily to achieve our mission of helping people change the direction of their lives, grow as individuals, and live life to its full potential.  

As a core colleague in our legal team, the Information Security Advisor will support all aspects of information security compliance for the organisation.

Reporting to the National Information Security Manager, the post holder will cover a broad range of information security disciplines, from conducting in-person audits of our services across the country, to coordinating questionnaire responses required by our commissioners.

The post holder will triage initial data breaches reported on our case management system. CRiiS, investigate these as required, and coordinate regular meetings with Legal Services colleagues to ensure appropriate escalation. The post holder will manage our Data Breach Log.

Where: Remote / Regional local hub

Hours: Full time, 37.5hrs per week

Full Time Salary Range: £42,076.87- £44,471.72

Full-time hours at Change Grow Live are 37.5 hours per week. For part-time roles, the salary and payments will be pro rata based on contracted hours.

About the role:  

• Conduct and support internal audits on information security measures at Regional Business Units and operational services.
• Support external accreditation audits as required.
• Support external accreditation management, including Cyber Essentials and NHS Data Protection Security Toolkit self-assessments.
• Triage, investigate and log reported data breaches.
• Coordinate responses to information security/cyber security questionnaires received from commissioners or others.
• Support with annual reviews of internal Data Protection and Information Security eLearning package.
• Support the management and maintenance of key registers such as the Information Asset Register and Information Risk Register.
• Represent information security interests across a range of meetings, both internal and external as required, commensurate with the role.
• Support completion of Data Protection Impact Assessments.

About you:  

• An understanding of technical, physical, and procedural measures which can safeguard information
• Good administrative, recording and reporting skills
• Ability to analyse data, cross referencing with other data sources and intelligence in order to offer conclusions
• Excellent written and verbal communication skills.
• Excellent stakeholder management skills.
• Ability to manage work to meet deadlines.
• Very strong Microsoft Office capability (particularly Work, Excel and Outlook).
• Experience of using an electronic incident management system.
• Excellent attention to detail.
•  Good level of numerical reasoning.

What we will give to you:  

• 25 days holiday (+ bank holidays) rising by 1 day for each years’ service “Capped at 30 days” 
• Flexible working arrangements  
• Paid ‘Wellness’ hour each week along with a ‘Wellness’ hub and Employee Assist Programme  
• Contributory pension scheme  
• A great selection of benefits incl. discounts for shopping, cinema, holidays, etc.  
• A friendly and supportive team  
• Training, career development & progression opportunities

Please ensure that when completing your application form and supporting statement, you reflect on the details outlined in the job description. This will help us understand how your skills and experiences align with the requirements of the role. 

If you require sponsorship, please note that this role is not eligible for a Health and Care Worker visa. You may be eligible for sponsorship under the Skilled Worker route but must meet the minimum salary requirements for the role. You can find out more here Skilled Worker visa: Overview - GOV.UK (www.gov.uk) 

Full-time hours at Change Grow Live are 37.5 hours per week. For part-time roles, the salary and payments will be pro rata based on contracted hours.

Direct applications only — we will not be engaging agencies for this vacancy.

We reserve the right to close the vacancy early if we receive a high number of applications, so we encourage you to apply as soon as possible.