Protective Security Lead Chief Security Office, Information and Knowledge Service

Transcription

1 Protective Security Lead Chief Security Office, Information and Knowledge Service The Chief Security Office is responsible for leading a cross-departmental approach for all aspects of protective security, covering Security Governance, Personnel Security, Physical Security and Information Security (including Information and Information Communication Technology (ICT) security). The Protective Security Lead will be one of Internal Affairs experts and thought leaders on protective security. They will work with the wider team to develop and direct the Department s strategy to achieve security maturity and capability. The position is responsible for leading and work that will ensure the department maintains and improves its security culture. Given the breadth of this area and the changing landscape, this role is key in providing ongoing guidance and assistance to the CSO and Executive Leadership Team (ELT). Reporting to: Chief Security Officer Location: Wellington Salary range: Delivery K What we do matters our purpose Our purpose is to serve and connect people, communities and government to build a safe, prosperous and respected nation. In other words, it s all about helping to make New Zealand better for New Zealanders. How we do things around here our principles We make it easy, we make it work Customer centred Make things even better We re stronger together Work as a team Value each other We take pride in what we do Make a positive difference Strive for excellence Working effectively with Māori Te Aka Taiwhenua our Māori Strategic Framework enables us to work effectively with Māori. We accept our privileged role and responsibility of holding and protecting the Treaty of Waitangi / Te Tiriti o Waitangi.

2 Provision of Strategic Advice and Leadership Develop a strong and sustainable security culture emphasising physical and personnel security across the Department Provide advice on Department s security strategy to ensure security protection is paramount Work with managers to implement strategies to increase security culture and awareness across the Department. Working with the wider team and portfolio leads to ensure branches have an up-to-date understanding of their obligations for managing security Contribute to the leadership of Chief Security Office to achieve the vision and business plan Represent the CSO or Department as required Security Planning and Performance Benchmark the Department against the Protective Security Requirements (PSR) and recommend improvements if deficiencies are identified Review and refresh security strategies and plans to continually lift the Department s performance against all elements of the PSR f Develop and implement policies and frameworks that support a security awareness culture. Work with the wider team to monitor security trends and initiatives, and where appropriate, incorporate into the Department s framework Ensure that the Department s approach to security and risk remains up to date An increase in understanding the importance of security which will be embedded in our culture Security strategies developed and implemented Advice on security issues is of high quality and given in a timely manner Managers and other stakeholders well informed Robust policies, frameworks and resources in place and working in DIA, supported by appropriate practices and processes There is a consistent approach to good security practise across DIA There is an uplift in security awareness and maturity Page 2 of 5

3 Effectiveness of Organisational protective security Work collaboratively to achieve successful integration of protective security into culture, strategies, policies, systems and processes of the Department Ensure that protective security principles are applied throughout the Department so our systems and business process are safe and fit for purpose Stakeholder Engagement Develop and maintain a close working relationship with the Chief Executive, DCEs and Branch Leadership Teams to understand business requirements, priorities and programmes of work across the Department Provide advice to CSO, GM and business stakeholders on security matters Work with the CSO to champion the desired security behaviours with a focus on increasing awareness engagement and culture Demonstrate leadership and support for the Department s security initiatives by engaging with key business owners and stakeholders Represent the Department on inter-agency security forums. Support for Branches Proactively engage with all branches to develop strategic partnerships to enhance the level of understanding of security Work collaboratively across the Department to enable effective decision making aligns to best security practise e.g. physical security, personal security, information management, Provide expert advice to branches in relation to the development of new Approved Information Sharing Agreements Provide advice and support to branches in dealing with security issues, where and when necessary Work with the CSO to prepare and implement a Security Communications Strategy to lift security awareness at the Department Increased capability in respect of responding to security risks Improvements in the levels of assurance and compliance within DIA More accurate and insightful understanding and reporting of assurance and compliance as part of overall risk management Strong, collaborative and productive relationships developed across the Department and with external agencies and professional bodies that enhance practice within DIA The practice of managing security risk becomes part of the way we do business round here ELT is assured that the organisation is covering all areas of the PSR framework and taking a comprehensive and appropriate response to security management and management of business risk Page 3 of 5

4 Advise Collaborate with Influence Inform Manage/ lead Deliver to The Department of Internal Affairs Health and safety (for self) Work safely and take responsibility for keeping self and colleagues free from harm Report all incidents and hazards promptly Know what to do in the event of an emergency Cooperate in implementing return to work plans A safe and healthy workplace for all people using our sites as a place of work. Health and safety guidelines are followed Who you will work with to get the job done Chief Security Officer Internal Chief Executive and ELT Deputy Chief Executives (DCEs) across DIA General Managers (across DIA) Privacy Officer Security specific roles across DIA NZSIS Government Security Forums Your delegations Human Resources and financial delegations Direct reports Your success profile for this role At DIA, we have a Capability Framework to help guide our people towards the behaviours and skills needed to be successful. The core success profile for this role is Specialist. Keys to Success: Problem solving Critical thinking Interpersonal savvy Navigating complexity Communicating with influence Technical and specialist learning Level Z Nil What you will bring specifically Experience: Extensive experience within the Security field Experience in security policy development in a government agency Demonstrated leadership, relationship management and change management skills Proven ability to effectively manage relationships by facilitating and influencing decision making Experience in delivering significant work programmes of a similar nature into organisations. Knowledge: Understanding of the security challenges Page 4 of 5

5 Your success profile for this role What you will bring specifically facing Government departments and the drivers behind the implementation of Protective Security Requirements (PSR). Understanding of DIA s strategic focus areas and how these relate to the importance of good Protective Security culture and practises. Understanding of leading industry standards such as the NZISM, ISO 27001:27002, Australian/NZ Protective Security Requirements. Understanding of the SIMS2 Framework. Skills: Proficient communicator of securityrelated concepts to a broad range of technical and non-technical staff Strong ability to bring diverse parts of an organisation together (including IT) for engagement on achieving outcomes Other requirements: A relevant tertiary qualification or equivalent knowledge, skills, and experience, and a commitment to ongoing professional development. Able to obtain and maintain the relevant security clearance Membership of a professional security body desirable Willingness to travel as required Page 5 of 5