Cyber Security Assurance Principal

Department for Transport; Greater London; Hybrid; GBP 62,000 - 82,000; Full time

Benefits offered by this job

Civil Service pension 28.97%

25 days annual leave

8 bank holidays + King’s Birthday Priv

Staff discount portal

Career development opportunities (e.g.

Employee Assistance Programme

Flexible working options

Job summary

Department for Transport's Digital, Information and Security Directorate seeks a Cyber Security Assurance Principal to strengthen cyber security across the organisation. You will ensure controls are in place and risks are identified, assessed and managed to deliver secure digital services.

Lead secure-by-design efforts across development, engage senior stakeholders with assurance findings, oversee penetration tests and red team exercises, and set security requirements for suppliers throughout

Qualifications

• Strong knowledge of security threats, risk management, and mitigation strategies.
• Experience of incident response and crisis management.
• Experience of implementing supply chain assurance mechanisms to improve cyber security and resilience.
• Experience of protective security, specifically ISO 27001/2, the NCSC’s CAF and/or GovS 007.
• Willingness to pursue industry certifications (e.g., CISSP) and ISO 27001 practitioner roles.

Responsibilities

• Leading the assurance of ‘secure by design’ principles into application development, integrating security tools, standards, and processes into product life cycles.
• Leading engagement with senior internal and external stakeholders to present assurance findings to inform risk‑based decisions
• Overseeing the procurement, development and implementation of a programme of penetration tests, red team exercises and/or vulnerability assessments of IT assets.
• Providing expert security advice on cyber security related risks, informed by current threat information, and pragmatic advice on mitigation.
• Set the cyber security requirements for the Department’s suppliers and oversee the assurance activities needed to ensure suppliers meet the required standards throughout the lifetime of the contract.

Skills

Security risk management

Incident response

Supply chain assurance

ISO 27001/2

GovS 007

Professional certifications (CISSP)

Tools

Penetration testing approach

Security assessment tools

Job description

Cyber Security Assurance Principal

Department for Transport

Location: London (This role is suitable for hybrid working)

Salary: £62,034 - £82,430

Base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

A Civil Service Pension with an employer contribution of 28.97%

Contract Type: Permanent – Flexible working, Full-time, Job share, Part‑time

Available Positions: 1

Join the Department for Transport's Digital, Information and Security Directorate and play a key role in strengthening cyber security across the organisation. As a Cyber Security Assurance Principal, you will help ensure that appropriate cyber security controls are in place and security risks are correctly identified, assessed and managed, enabling the department to deliver secure and resilient digital services.

You will ensure adherence to the department’s cyber security policies, standards and assurance frameworks. You'll evaluate risks, review security arrangements and provide evidence-based recommendations that support informed decision‑making and continuous improvement.

Top Responsibilities

• Leading the assurance of ‘secure by design’ principles into application development, integrating security tools, standards, and processes into product life cycles.
• Leading engagement with senior internal and external stakeholders to present assurance findings to inform risk‑based decisions
• Overseeing the procurement, development and implementation of a programme of penetration tests, red team exercises and/or vulnerability assessments of IT assets.
• Providing expert security advice on cyber security related risks, informed by current threat information, and pragmatic advice on mitigation.
• Set the cyber security requirements for the Department’s suppliers and oversee the assurance activities needed to ensure suppliers meet the required standards throughout the lifetime of the contract.

Benefits

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24‑hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work‑life balance.

About You

• Strong knowledge of security threats, risk management, and mitigation strategies.
• Experience of incident response and crisis management.
• Experience of implementing supply chain assurance mechanisms to improve cyber security and resilience
• Experience of protective security, specifically ISO 27001/2, the NCSC’s Cyber Assessment Framework and/or Government Functional Standard GovS 007: Security.
• Willingness to work towards industry recognised professional certifications in information risk, penetration and ethical hacking and ISO 27001 (e.g. Management of Risk Practitioner, Certified ISO 27001 Practitioner, CISSP).

Additional Information

The role is part of the and utilises an enhanced Capability–Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

This vacancy closes at 23:55 on Sunday 6th September 2026