The Ministry of Justices (MoJ) Security and Information Directorate (SID) has a broad range of responsibilities including personnel, physical and cyber security through to information management and data protection. Our aim is to ensure the MoJ holds information in compliance with legislation; that all information is correctly stored, accessible, and shared appropriately; and our information is protected, and the risks managed.
The MoJ Group Security Team sits within SID and is enabling good security practices through the provision of personnel and physical security policies, guidance, and education and the provision of a leak investigation service, providing assurance to the departmental SIRO, the Permanent Secretary, and other senior stakeholders that these risks are being effectively managed in the delivery of MoJ objectives.
Working as part of the MOJs Security and Information Directorate (SID) youll use your experience and passion to push forward MOJs ambitious goals in the security arena. You will work with a team of committed professionals to achieve clear, positive and ongoing improvements to our services, and the department-wide security culture.
We are seeking to recruit people from a diverse group of backgrounds to make sure we have a wide range of skills to strengthen our security capability across government. We value the fact that our different backgrounds, cultures, genders, experiences, and ways of working produce a more effective team. Each one of us has a part to play in helping government to keep the United Kingdom secure.
We welcome level transfers and applications for promotion. The role is part of the Government Security Profession, and is eligible for sponsored membership to the Security Institute or other relevant professional body.
Specialist allowance
Due to the role being analytical, those successful in recruitment may be eligible for a specialist allowance following an analytical based interview for the following amount:
- SEO London: £500
- SEO National: £1500
Role Purpose
The Insider Risk Data and Optimisation manager reports to the Personnel Security Lead and actively works as part of the Insider Risk Programme Team to assess, manage and reduce insider risk within the MOJ.
This is a new role which has been created to help the MOJ meet the requirements of the Government Security Functional Standard GOVS007 and the Personnel Security Standards.
The insider risk programme team is a central hub for organisational activities relating to insider risk. This is a new team which has been set up with the aim of having a systematic risk identification and management approach where insider risks are assessed and considered against organisational assets. The team works collaboratively with other security teams and the wider business to break down data silos and implement proportionate actions to reduce organisational insider risk.
This role reports to the Personnel Security Lead and actively works as part of the Insider Risk Programme Team to assess, manage and reduce insider risk within the MOJ. They will be responsible for creating and optimising the insider risk data analysis process, ensuring that data analysis is completed to help with the identification and mitigation of insider threats and risks.
We are looking for someone with technical expertise in data collection, preparation, analytics and reporting to work as part of a Security Team. This role will work within a team of security professionals, and might be the only role with data analyst responsibility and knowledge, therefore the successful candidate must have the technical confidence to work independently.
The successful applicant will have an exciting opportunity for developing their knowledge and experience within the security profession with learning, development, and networking opportunities. All security and data analytics-essential courses will be provided.
Insider risk data and optimisation manager- SEO
Negotiate data access: Work with the personnel security lead to negotiate access to data and implement Data sharing agreements to ensure that all relevant information for insider risk assessment and management is being assessed and processed correctly.
Data reporting: Create a data reporting and sharing process that increases data visibility for security and senior leadership, enabling more collaborative and strategic decision-making for insider risk.
Current and accurate data records: Work with key business stakeholders to find efficient ways to keep records on organizational roles, assets and information up-to-date and accessible. To ensure the wider security team has accurate information to inform risk assessments and implement proportionate mitigations.
Identify and analyze relevant organizational data sources to provide valuable insights into insider risk.
Measure organizational insider risk: Continuously collect data from multiple sources and use it to measure organizational insider risk and inform the insider risk programme.
Stakeholder Management: Build relationships with key stakeholders across the organization, including legal, data science hub, HR, Justice Digital, and other Security teams.
Technological advancement: Explore and utilize emerging technologies to automate routine tasks and knowledge delivery to improve the personnel security teams capacity to manage more complex issues.
Test and validate new processes and automation thoroughly to ensure the system is fit for purpose and take into consideration performance and the end-user experience.
GDPR compliant: Ensure that any new processes or databases which are implemented conform to GDPR requirements and are designed for and with ease of compliance in mind for the future.
Horizon scan: Assess data on threats and risks to horizon scan and inform future insider risk mitigation initiatives.
Technical Criteria
Senior Data Analyst- https://ddat-capability-framework.service.gov.uk/role/data-analyst#senior-data-analyst
Essential Skills:
Data Analysis and Problem Solving: Possess strong analytical and problem-solving skills to identify patterns, trends, and solutions within complex datasets
Autonomy and Quality Focus: Demonstrate a high level of self-motivation and commitment to delivering exceptional results.
- Coding Language: Experience of using software languages such as SQL, R and python.
- Communication and Collaboration:Excel in building relationships and effectively communicating complex technical information to diverse audiences.
Data Governance and Protection: Proven experience in designing and implementing data systems aligned with regulatory requirements (e.g., GDPR).
Automation Expertise: Possess a deep understanding of automation principles and proficiency in implementing, managing, and maintaining automated processes.
Data Visualization: Experience using Power BI or similar tools to create impactful data visualizations and reports.
Desirable Skills:
Certified Insider Threat analyst (or equivalent) certification.
- Data Pipeline Development: Working with data and developing data pipelines with data experts and data specialists across the analytical community.
- Security Domain Knowledge: Demonstrated experience in the security profession with a strong understanding of insider threats and risks.
Insider Threat Analysis: Proven experience in conducting insider threat assessments.
Data Analysis Methodologies: Proficiency in applying advanced analytical techniques and leveraging appropriate data sources for assessment.
Application Process
This vacancy will be assessed using Success Profiles to assess Behaviours and technical expertise. The application process will require 250 word STAR format for the 3 identified behaviours, the submission of a CV and a statement of suitability to evidence how you meet the essential and technical criteria required for the role.
Shortlisted candidates will be invited to attend a panel interview and will be requested to deliver a 10 minute presentation with supporting slides to demonstrate their technical skills and answer 3 behaviour-based questions.
We will assess you against the following items during the selection process:
Civil service behaviours
Technical Criteria
