Cyber Security Assurance Principal

Department for Transport (DfT), United Kingdom; Greater London; Hybrid; GBP 62,000 - 82,000; Full time

Benefits offered by this job

Civil Service Pension 28.97%

25 days annual leave

8 Bank Holidays + Privilege Day

Staff discount portal

Career development opportunities

Flexible working options

Job summary

The Department for Transport in London is recruiting a Cyber Security Assurance Principal to strengthen cyber security across the organisation. You will ensure security controls are in place, assess risks and provide evidence-based recommendations to support informed decision-making.

This role offers a base salary of £62,034 plus a Digital and Data allowance of up to £20,396, with a Civil Service Pension and generous annual leave. Hybrid working is available.

Qualifications

• Strong knowledge of security threats, risk management and mitigation strategies.
• Experience of incident response and crisis management.
• Experience implementing supply chain assurance mechanisms and ISO/27001 related standards.

Responsibilities

• Lead assurance of secure by design in application development across product life cycles.
• Engage with senior stakeholders to present assurance findings and inform decisions.
• Oversee penetration tests, red team exercises and vulnerability assessments of IT assets.
• Provide expert security advice on cyber risks and mitigation strategies.
• Set cyber security requirements for suppliers and oversee assurance throughout contracts.

Skills

Threat knowledge

Risk management

Incident response

Security assurance

Job description

477374 Cyber Security Assurance Principal

Department for Transport

Apply before 11:55 pm on Sunday 6th September 2026

Location: London (This role is suitable for hybrid working)

The base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

A Civil Service Pension with an employer contribution of 28.97%

Join the Department for Transport's Digital, Information and Security Directorate and play a key role in strengthening cyber security across the organisation. As a Cyber Security Assurance Principal, you will help ensure that appropriate cyber security controls are in place and security risks are correctly identified, assessed and managed, enabling the department to deliver secure and resilient digital services.

You will ensure adherence to the department’s cyber security policies, standards and assurance frameworks. You'll evaluate risks, review security arrangements and provide evidence-based recommendations that support informed decision-making and continuous improvement.

Top Responsibilities

• Leading the assurance of ‘secure by design’ principles into application development, integrating security tools, standards, and processes into product life cycles.
• Leading engagement with senior internal and external stakeholders to present assurance findings to inform risk-based decisions
• Overseeing the procurement, development and implementation of a programme of penetration tests, red team exercises and/or vulnerability assessments of IT assets.
• Providing expert security advice on cyber security related risks, informed by current threat information, and pragmatic advice on mitigation.
• Set the cyber security requirements for the Department’s suppliers and oversee the assurance activities needed to ensure suppliers meet the required standards throughout the lifetime of the contract.

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

About You

To be successful in this role you will need to have the following experience:

• Strong knowledge of security threats, risk management, and mitigation strategies.
• Experience of incident response and crisis management.
• Experience of implementing supply chain assurance mechanisms to improve cyber security and resilience
• Experience of protective security, specifically ISO 27001/2, the NCSC’s Cyber Assessment Framework and/or Government Functional Standard GovS 007: Security.
• Willingness to work towards industry recognised professional certifications in information risk, penetration and ethical hacking and ISO 27001 (e.g. Management of Risk Practitioner, Certified ISO 27001 Practitioner, CISSP).

Additional Information

The role is part of the and utilises an enhanced Capability–Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

This vacancy closes at 23:55 on Sunday 6th September 2026