[Hiring] Sector security specialist @Jisc

Role Description

As a Sector security specialist within the Security Directorate, you will be responsible for designing, developing, and delivering cyber security and resilience training for the UK education and research sector. Your role will translate and deliver technical security concepts, frameworks, regulation, emerging threats, and good practice into practical and engaging learning that organisations can apply to improve their cyber resilience.

You will help develop and maintain a training roadmap aligned to evolving sector needs and deliver a range of training, workshops, exercises, and simulations. The role will also contribute to building Jisc’s longer-term sector exercising, simulation, and capability development, ensuring training remains current, practical, and focused on measurable improvements in cyber resilience.

What you’ll be doing:

• Develop and maintain a Cyber Resilience Training Roadmap, working with the Head of Resiliency and Engagement, Head of Training Services, and subject matter experts to identify priorities based on sector needs, emerging threats, regulation, and Jisc’s cyber strategy.
• Design, develop, and deliver high-quality cyber resilience training and learning pathways for technical, security, and senior leadership audiences, using face-to-face, online, workshop, and practical learning approaches.
• Develop training that enables organisations to understand and practically apply relevant cyber security frameworks, standards, regulation, assurance approaches, and good practice, adapting content to the specific needs and challenges of the education and research sector.
• Develop and deliver practical cyber exercises and simulations, including red teaming, ransomware response, crisis management, tabletop exercises, and advanced incident response scenarios, including refreshing and expanding Jisc’s existing Ransomware Incident Response training.
• Develop and maintain engaging training materials, facilitator guides, exercises, scenarios, assessments, presentations, and supporting resources, working with internal and external subject matter experts to ensure content is technically accurate, relevant, accessible, and current.
• Deliver training, workshops, presentations, and practical sessions to Jisc members and the wider cyber community, supporting participants to translate learning into practical improvements within their organisations.
• Work collaboratively with Outreach & Engagement, Sector Resilience, Product, Marketing and Communications, and other relevant teams to coordinate, promote, and align training with wider Jisc cyber services and sector priorities.
• Represent Jisc at relevant sector events, conferences, workshops, and community activities, delivering presentations, demonstrations, and practical cyber resilience sessions.

Qualifications

• Proven experience designing, developing and delivering cyber security, cyber resilience or information security training to technical, operational and senior leadership audiences.
• Strong technical knowledge across core cyber security disciplines, including security operations, incident response, identity, endpoint, network, cloud, vulnerability management, logging and monitoring, with the credibility to engage with and challenge technical security professionals.
• Experience with enterprise security technologies such as Microsoft security, SIEM, EDR/XDR, cloud or network security.
• Experience developing and facilitating practical exercises, simulations, workshops and tabletop scenarios, ideally covering incident response, ransomware, crisis management or cyber resilience.
• Experience evaluating and improving training through feedback, assessment and measurable learning outcomes.
• Excellent training, facilitation and presentation skills, with the ability to deliver engaging learning both online and in person.
• Degree or equivalent professional experience in cyber security, information security, computing, technology or Industry-recognised cyber security qualifications such as CISMP, CISM, CISSP, Security+ or equivalent with a recognised cyber security qualification or demonstrable equivalent professional experience.
• Demonstrable training, teaching, facilitation or learning development experience.

Requirements

• Don’t meet every single requirement? We know that sometimes people can be put off applying for a job if they think they can’t tick every box, so we encourage you to apply even if you do not meet 100% of the requirements, but you feel this role is perfect for you. You may be just the right candidate for this or other roles!

Benefits

• Flexible work pattern, which can adapt to suit your schedules and personal commitments.
• 31 days annual leave (plus bank holidays) that includes three closure days over Christmas.
• Buy up to an additional 5 days leave during the flexible benefits window.
• Generous flexible pension schemes.
• A range of wellbeing lifestyle benefits including company paid health care cash plan, mental health first aiders and support.
• A company culture of continuous learning with access to thousands of LinkedIn Learning courses, and lots of resources and opportunities to support your development.
• Financial well-being support including access to preferential loan and savings plans, mortgage advice, will writing tools and support and resources to help you make the most of your money.
• A wide range of discounts and cashback from retailers and big-name high-street stores.
• Family friendly policies including enhanced parental, maternity and paternity and co-parental leave as well as opportunity for career breaks.
• Support your volunteering with up to 3 days volunteer leave.