EXPERIENCE:

The ideal candidate will possess:

• A degree or equivalent work-related attainment or experience.
• Relevant certifications (e.g., CISSP, CISM, ISO 27001).
• Proven experience in developing and implementing policy and strategy in information governance and security.
• Expertise in information assurance, risk management, and stakeholder engagement.
• Strong leadership and decision-making skills, with the ability to manage and mitigate organisational risk.
• Excellent communication skills, capable of translating complex security concepts for technical and non-technical audiences.

The closing date for the receipt of applications is 29th August 2025 however interest in this job may be high and we therefore reserve the right to close the vacancy early.
You will be notified if your application has been successful. Interview date to be confirmed .
Should you require any help or advice with your online application, please contact the Recruitment Helpdesk on 01708 432770

WE PRACTICE ANONYMISED RECRUITMENT. PLEASE ENSURE THAT YOU REMOVE ALL PERSONAL INFORMATION FROM ANY DOCUMENTS THAT YOU UPLOAD.

About Us
With its excellent transport links into central London, extensive town centre regeneration and the highest concentration of green space anywhere in London, Havering has a unique offer as a place to live, work and visit. By making the most of its position and opportunities, Havering is becoming a hub for start-ups and expanding businesses, as well as construction, logistics, engineering and manufacturing industries.
Find out why you should work for Havering Council

The main duties and responsibilities of this role are:

• Leading the development of organisational policies, standards, and guidelines for secure information and records management.
• Designing and implementing information security control frameworks to protect the Council’s systems and data from cyber threats.
• Driving the Council’s security management strategy, ensuring alignment with best practice and regulatory requirements.
• Monitoring and maintaining assurance across the availability, integrity, authenticity, confidentiality, and non-repudiation of organisational records.
• Delivering training and awareness programmes to embed a culture of security and privacy across all staff.
• Overseeing network security monitoring, breach investigation, and regular system testing to ensure continuous protection.
• Reporting on the Council’s information governance and security posture to senior leadership, with clear risk assessments and mitigation plans.
• Advising on information risk in major business proposals and coordinating with external agencies on cyber security matters