Please note this role will close at 00.01 on the 31st January so we advise making your application by midnight on the 30th January. About Ofcom Ofcom is the regulator for the communications services that we use and rely on each day. We make sure people get the best from their broadband, home phone and mobile services, as well as keeping an eye on TV and radio. Our culture is clear– we live by our values: Empowerment; Excellence; Collaboration; Agility and Respect. These define how we work to deliver our purpose, now and in the future. The behaviours which support these values set the path for a fully inclusive and innovative culture at Ofcom. We focus not only on what wedo, but how we do it. We pride ourselves on being an organisation of people who genuinely care about helping others. Purpose and Scope of the Role Working closely with other members of the Network Security team, you will be responsible for establishing and supporting the roll out of a network security regime for the communication providers. This role will require you to have in depth knowledge of communication providers and demonstrate technical insights to help develop and implement guidance on network topology, security, operations and processes so that Ofcom’s policy position and approach to the regulation of these new network security requirements is effective appropriate and measurable. This role will require you to provide technical insights and support the delivery of a new telecoms security framework for Communications Providers. Ofcom has had responsibilities for communications network security and resilience for several years and has recently received new responsibilities in this area. In the light of the increasing economic and social significance of communications and services, the security and resilience of fixed and mobile networks and services is becoming moreimportant, and we are taking proactive steps to ensure that they are designed and operated to meet the needs and expectations of users. Your Key Responsibilities Work with other members of the team in responding to and assessing telecoms and digital infrastructure company responses to security and resilience incidents that occur in their infrastructure which are reported to Ofcom. Ensuring enough information is present to deliver a sound security risk assessment. Support the roll out, management and monitoring of a programme promoting the adoption of the new legislation underpinning the TSR. This will include maintaining and supporting a compliance monitoring regime that will provide annual report to the SOS (Secretary of State) for DCMS. This will include, supporting and future review and update of the “code of Practise”, compliance guidance, and requesting evidence to support CP assessment including carrying out and/or managing compliance assessments against that “code”. Work with colleagues in Ofcom investigations teams to provide technical support in relation to any enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Essential skills, knowledge and experience Security Assurance and Risk Management: * Managing remediation plans within a Communications Provider (mobile, fixed, internet). * Evaluating technical vulnerabilities and identifying appropriate control measures. * Experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery, situational awareness, testing). * Managing and monitoring security assurance programs. Cybersecurity Threats: * Understanding of threat actors targeting Ofcom’s regulated sector and associated cyber security threats. Telecoms Technology and Architecture: * Understanding of fixed and mobile architectures. * Practical application of best practices for the technology under review. * Maintaining awarenessof current and emerging telecoms technologies through training, industry liaison, and managing external technical research projects. Articulating Ideas: Written and oral communication skills, including presenting to internal and external audiences. Executing Plans : Experience in project management, including developing and delivering plans, and managing risks and issues. Qualifications * Relevant professional qualifications * Maintains UK security clearance or is willing to undergo a vetting check (once started), as this is a requirement for the role. Although not required to be considered for the role, it is helpful if you have any of the below: * Supply chain management and vendor contractual arrangements. * Third-party or managed services access and security. * Network separation and high assurance systems management. * User identity management. * Asset management. * Auditing and testing. * Experience in fixed and mobile signalling (GSM to 5G). * 5G Radio Access Networks (RAN) and Open RAN. * Virtualisation of telecoms network functions. * Understanding of vendor risk assessment and evaluation. * Understanding of human and physical security aspects in telecoms. * Management of cryptographic material, including key derivation, management, revocation, distributions and hardware roots of trusts. * Telecoms signalling systems and monitoring/defensive measures. * Implementation of telecoms network functions or business systems within public cloud environments. At Ofcom we prioritise inclusive and diverse recruitment in order to truly reflect the society we represent. Where positions are listed as full time, we remain open to reduced hours, part-time arrangements, job shares and other flexible working options from dayone of employment. We warmly welcome applications from candidate returning to work after a break – for whatever reason. As a disability confident employer, we offer interviews to any disabled applicant who meet essential criteria for advertised roles. Learn more about the scheme here. If you need information in an alternative format or have specific preferences, please contact our recruitment