Information Security Officer

About this role

Police Scotland is seeking an experienced Information Security professional to join our Information Security and Records Management team with a specialist focus on Data Loss Prevention (DLP).x

This is an exciting opportunity for an individual with strong Information Security, Governance, Risk and Compliance (GRC), Data Protection and Data Loss Prevention experience to help shape and embed the organisation's approach to protecting sensitive policing information.

As an Information Security Officer, you will play a key role in ensuring that information is handled securely, lawfully and proportionately across the organisation. The successful candidate will lead and support DLP initiatives, helping identify, prevent and manage risks associated with unauthorised disclosure, loss or misuse of police information while ensuring that security controls support operational policing outcomes. This role aligns with the existing Information Security Officer remit to safeguard the confidentiality, integrity and availability of information assets across the organisation.

Please Note - this is a Fixed Term Contract for 18 months

Key Responsibilities -

• Lead and support the development, implementation and continuous improvement of Data Loss Prevention (DLP) controls and processes.
• Identify, assess and manage information leakage risks across people, process and technology domains.
• Support investigations into suspected information security incidents, data breaches and information handling concerns.
• Analyse DLP alerts, trends and reporting data to identify emerging risks and opportunities for control improvement.
• Work collaboratively with Digital Division, Information Governance, Data Protection, Professional Standards and business areas to reduce data loss risks.
• Provide expert advice on secure information handling, data classification, information sharing and data protection obligations.
• Support the development of DLP standards, procedures, awareness campaigns and guidance.
• Conduct information security risk assessments and provide pragmatic, risk-based advice.
• Support governance, audit and compliance activities across the organisation.
• Develop and monitor security controls aligned to recognised standards and good practice.
• Produce assurance reports, metrics and management information for senior stakeholders and governance boards.
• Contribute to the maintenance of Information Security policies, standards and operating procedures.
• Support continuous improvement activities relating to information security and data protection.
• Build effective relationships with operational and corporate departments.
• Deliver awareness sessions, workshops and guidance to staff and management.
• Promote a positive information security culture across Police Scotland.
• Influence and support secure behaviours and informed risk-based decision making.

Why join us?

• Competitive salary with annual increments
• Full-time or part-time shift patterns
• 28 days annual leave and 6 public holidays (increases with service)
• Local government pension scheme for long-term security
• Ongoing training to develop your skills
• Opportunities for career progression and professional growth
• Comprehensive wellbeing support and dynamic work environment
• Exclusive discounts and savings through our rewards and benefits network

Every role in Police Scotland plays a part in Keeping People Safe.

This is an opportunity to join a national organisation serving communities across Scotland, where integrity, fairness and respect are at the heart of everything we do.

Police Scotland serves over 5 million people across Scotland’s cities, towns, rural and island communities.

Our 2030 vision is for safer communities, less crime, supported victims and a thriving workforce. We are committed to equality, human rights and building a workforce that reflects the communities we serve.

Full details regarding this vacancy can be found in the attached Role Profile.

Applicants must be a British citizen, a member of the EU or other states in the EEA, a Commonwealth citizen or a foreign national free of restrictions.

You should have been resident in the UK for a minimum of five years immediately prior to application for this role

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.