Monitor security alerts and threat intelligence feeds to detect and respond to cyber incidents.
Lead or support incident response activities, including investigation, containment, eradication, and recovery.
Manage and maintain security tools such as Security Information and Event Management (SIEM), endpoint protection, vulnerability scanners, and firewalls.
Conduct regular vulnerability assessments and coordinate remediation efforts.
Ensure compliance with public sector cyber security frameworks and deliver cyber security awareness training and phishing simulations to staff, promoting a culture of security across the organisation.
Advise on security requirements for digital transformation projects, ensuring alignment with organisational policies and risk appetite.
Review new systems and services for security risks, promoting secure-by-design principles throughout their lifecycle.
Liaise with internal stakeholders, external partners, and national cyber security bodies (e.g., National Cyber Security Centre (NCSC), law enforcement).
Be responsible for out of hours (OOH) operational management of NRW’s entire ICT Security service on rota basis.
Undertake health and safety duties and responsibilities appropriate to the post
Be committed to Natural Resources Wales Equal Opportunities and Diversity Policy , together with an understanding of how it operates within the responsibilities of the post
Be committed to your own development through the effective use of your personal development plan (known as Sgwrs).
Any other reasonable duties requested commensurate with the grade of this role.
Required to take part in incident response activities
Civil Service Pension Scheme offering employer contributions of 28.97% (successful internal staff will remain in their current pension scheme)
28 days annual leave, rising to 33 days
generous leave entitlements for all your life needs
commitment to professional development
health and wellbeing benefits and support
weekly wellbeing hour to use as you choose
