Cyber Risk & Security Lead

Ad Warrior Ltd; Ledston; Hybrid; GBP 40,000 - 49,000; Full time

Benefits offered by this job

Pension contribution 28.97%

25 days annual leave

Bank holidays

Privilege Day

Flexible working

Staff discount portal

Career development opportunities

Employee Assistance Programme

Job summary

DVSA seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cyber risks across the agency’s digital estate. You will shape risk management strategies, ensure compliance with government security standards and work with multiple teams to protect data and systems.

You should bring deep knowledge of cyber frameworks, risk assessment methods and threat management, plus strong communication with both technical and non-technical stakeholders.

Qualifications

• Deep knowledge of cybersecurity frameworks and risk assessment methods.
• Ability to communicate with both technical and non-technical stakeholders.
• Experience leading risk management activities across departments.
• Proven track record in risk-based decision making.

Responsibilities

• Identify, understand and mitigate cyber-related risks, and advise risk owners to inform risk-based decisions; focus on policy compliance and risk controls.
• Lead compliance with the Security Policy Framework, NCSC Standards and DVSA policies across the agency.
• Lead analysis and derivation of security needs; conduct risk assessments and threat assessments.
• Provide tailored advice to remediate identified risks applying security capabilities and published guidance.
• Ensure DVSA compliance with principles and outcomes of HMG Security Policy Framework, NCSC, CAF and NIST.
• Provide leadership to direct reports, uphold integrity and the agency's reputation.
• Lead incident response as directed by Head of Cyber Assurance.

Job description

DVSA seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cyber risks across the agency’s digital estate. You will shape risk management strategies, ensure compliance with government security standards and work with multiple teams to protect data and systems.

You should bring deep knowledge of cyber frameworks, risk assessment methods and threat management, plus strong communication with both technical and non-technical stakeholders.