Education
Essential:

Advanced university degree in Computer Science, Information Management, Risk Management or similar graduate discipline. A first level degree with at least 9 years of experience can be excepted in lieu of an advanced degree.

Additional Professional qualification(s) in information security, such as CISSP, CISA, CISM certification, along with strong technical (ICT) security skills and demonstrable experience in the design/implementation of secure IT environments are a must.

Knowledge and Experience
Essential:

At least 7 years of progressively responsible and recent related experience in administration and management of the IT security function in large organizations, including the supervision of all aspects of ICT security operations;
Substantial experience in development and implementation of ICT and information security policies, standards and procedures;
Recent and well-rounded supervisory experience with responsibilities in a classified or sensitive working environment to a level of at least SECRET;
Understanding key concepts of designing and running classified systems including cryptographic assurance, secure thin client architectures and compartmentalisation;
Solid understanding of telecoms related security concepts (endpoint defence, packet switched networks) in a sensitive environment.

Desirable:

Experience in implementing and/or auditing information security programmes based on ISO 27001/27002 and a detailed knowledge of other IT security standards is highly desirable;

Experience in accreditation and assurance programmes from a national security perspective.