489941 - Lead Cyber Security Risk Manager - Home Office Cyber Security

Government Recruitment Service; Sheffield; Hybrid; GBP 56,000 - 69,000; Full time

Benefits offered by this job

Disability Confident employer scheme

Job summary

Government Recruitment Service is recruiting a Lead Cyber Security Risk Manager for the Home Office Cyber Security function in Sheffield. The role focuses on risk-based cyber security assurance across projects and live services, providing independent challenge and guidance to enable auditable risk decisions.

You will lead management of cyber risks, develop policy, and support continuous improvement while liaising with senior stakeholders in a hybrid work pattern.

Qualifications

• Experience in risk management within cyber security or information security.
• Ability to communicate complex risk concepts to senior stakeholders.
• Strong analytical and problem-solving skills.

Responsibilities

• Lead proportionate, risk-based cyber security assurance across projects and live services.
• Identify, assess and help mitigate cyber risks to critical systems and infrastructure.
• Provide independent challenge and advice throughout the service lifecycle.
• Develop and promote risk management policies and secure by design principles.

Job description

489941 - Lead Cyber Security Risk Manager - Home Office Cyber Security

Home Office Digital designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.

As a Lead Cyber Security Risk Manager in the Compliance and Assurance team, you will lead proportionate, risk-based cyber security assurance across Home Office projects and live services, identifying, assessing and helping mitigate cyber risks to critical national infrastructure and business-critical systems. Drawing on a range of evidence and your expertise, you will provide independent challenge and advice throughout the service lifecycle, enabling stakeholders, including senior leaders, to make informed, auditable decisions about cyber risk.

You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.

The Lead Cyber Security Risk Manager supports, plans and develops the implementation and management of organisation-wide processes and procedures for the management, assurance or governance of cyber risk. They will provide tailored expert support and advice that highlights cyber security risks to a range of stakeholders, projects, business teams and service owners, helping them to remedy identified risks by enabling well-informed and auditable decisions, using published guidance and standards, and drawing on a range of experts as well as personal expertise.

As a Lead Cyber Security Risk Manager, your main responsibilities will be;Independently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs including assuring, evaluating and challenging the adequacy of risk assessments, controls and evidence, while retaining the ability to undertake targeted assurance activity where necessary.Lead and prioritise proportionate, risk-based second-line cyber security assurance across an assigned portfolio of projects, live services and product areas, ensuring assurance effort is focused on the areas of greatest material risk and formulate clear, evidence-based assurance opinions, identifying material control weaknesses, residual risks, dependencies and limitations, and provide recommendations to support informed and auditable risk decisions.Developing risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies, embedding Secure by Design principles where appropriate.Communicating effectively with senior stakeholders to ensure they recognise the importance of security considerations and advising senior stakeholders on their approach to risk assessment in the context of their organisational outcomes, providing independent constructive challenge where appropriate.Managing risk management processes, reviewing their efficiency and effectiveness, and leading recommendations for continuous improvement. This includes reviewing internal controls following any security breach, providing advice on how to remediate any vulnerabilities discovered, and agreeing and overseeing remedial solutions, controls and safeguards, including tracking assurance findings where appropriate.Assessing reviews and risk assessments and ensuring identified risks are managed in accordance with Home Office risk management policies, including assurance outcomes and remediation activity where applicable.

Proud member of the Disability Confident employer scheme

489941 - Lead Cyber Security Risk Manager - Home Office Cyber Security

Company: Government Recruitment Service Salary: from £62,732 a year Hours: Full-time Location: Sheffield Working pattern: Hybrid - 2 days remote Job type: Permanent Posting date: 11 Nov 2026 Closing date: 23 Nov 2026

Summary

Job summary

Home Office Digital designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.

As a Lead Cyber Security Risk Manager in the Compliance and Assurance team, you will lead proportionate, risk-based cyber security assurance across Home Office projects and live services, identifying, assessing and helping mitigate cyber risks to critical national infrastructure and business-critical systems. Drawing on a range of evidence and your expertise, you will provide independent challenge and advice throughout the service lifecycle, enabling stakeholders, including senior leaders, to make informed, auditable decisions about cyber risk.

You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.

The Lead Cyber Security Risk Manager supports, plans and develops the implementation and management of organisation-wide processes and procedures for the management, assurance or governance of cyber risk. They will provide tailored expert support and advice that highlights cyber security risks to a range of stakeholders, projects, business teams and service owners, helping them to remedy identified risks by enabling well-informed and auditable decisions, using published guidance and standards, and drawing on a range of experts as well as personal expertise.

Essential requirements

As a Lead Cyber Security Risk Manager, your main responsibilities will be;Independently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs including assuring, evaluating and challenging the adequacy of risk assessments, controls and evidence, while retaining the ability to undertake targeted assurance activity where necessary.Lead and prioritise proportionate, risk-based second-line cyber security assurance across an assigned portfolio of projects, live services and product areas, ensuring assurance effort is focused on the areas of greatest material risk and formulate clear, evidence-based assurance opinions, identifying material control weaknesses, residual risks, dependencies and limitations, and provide recommendations to support informed and auditable risk decisions.Developing risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies, embedding Secure by Design principles where appropriate.Communicating effectively with senior stakeholders to ensure they recognise the importance of security considerations and advising senior stakeholders on their approach to risk assessment in the context of their organisational outcomes, providing independent constructive challenge where appropriate.Managing risk management processes, reviewing their efficiency and effectiveness, and leading recommendations for continuous improvement. This includes reviewing internal controls following any security breach, providing advice on how to remediate any vulnerabilities discovered, and agreeing and overseeing remedial solutions, controls and safeguards, including tracking assurance findings where appropriate.Assessing reviews and risk assessments and ensuring identified risks are managed in accordance with Home Office risk management policies, including assurance outcomes and remediation activity where applicable.

• Save to favourites
• Share this job via email
• Report this job

Proud member of the Disability Confident employer scheme

About Disability Confident Disability Confident is a government scheme. It encourages employers to recruit and retain disabled people and those with long term health conditions.

Related jobs

Data Protection and Compliance Manager

£200 to £225 per day

Hays Specialist Recruitment

Denbigh, Denbighshire

Remote Temporary Full time

Sector security specialist

from £47,000 per year

Jisc

Remote Permanent Full time

ENT Consultant - Remote

£495 to £495 per day

Omnes Healthcare

Remote

Remote Temporary Full time

Browse more jobs