Cyber Security Manager

Office for National Statistics; Fareham; Hybrid; GBP 60,000 - 67,000; Full time

Benefits offered by this job

Pension scheme

Flexible working patterns

Maternity leave 26 weeks

Employee Assistance Program

Diversity networks

Mental Health Allies

Sports and social club

Holiday entitlement 25–30 days

Job summary

The Office for National Statistics is seeking a Cyber Security Risk Manager - Lead to join the Security Risk Advisory team. You will deliver security risk assessments, threat modelling and guidance to protect digital programmes, including Census 2031, across internal and supplier environments.

Working patterns offer flexibility and full-time options; you will report to the Cyber Security Risk Manager - Principal and contribute to secure design and governance across the organisation.

Qualifications

• Experience in cyber security risk assessments.
• Ability to develop security controls and guidance.
• Knowledge of data protection and regulatory requirements.

Responsibilities

• Support security assessments and assurance for delivery lifecycles.
• Lead risk analyses and threat assessments.
• Provide tailored security advice to stakeholders.
• Ensure alignment with government security frameworks.
• Collaborate with internal and external teams to implement security measures.
• Advise on using secure/open-source products.
• Maintain policies and controls in proportion to risk.
• Guide risk management activities within governance structures.

Skills

Cyber Security

Risk Assessment

Threat Modeling

Security Advisory

Stakeholder Engagement

Job description

Salary: £60,007 - £66,701. Plus a skills allowance of up to £7,500 (non-pensionable and non-contractual) may be payable. Starting salary and level of skills allowance will depend on a technical

skills assessment at interview.

Working Patterns: Flexible working, Full-time, Job share, Part-time, Compressed hours

Closing Date: Apply before 11:55 pm on Tuesday 8th September 2026

The Cyber Security Risk Manager - Lead role forms part of the Security Risk Advisory team within the Security and Information Management Division at the Office for National Statistics (ONS). The roles reports to the Cyber Security Risk Manager - Principal. The primary focus of these roles are to provide the Organisation with security advice and best practice to develop ‘Secure by Design’ protections for organisational assets and embed the ONS Security Framework - principles; policies; processes; threat model; security risk management into the ONS.

This role will be dedicated to supporting all security assessment and assurance activities associated with the preparation and delivery of UKSA digital programmes, such as Census 2031. Key activities will involve security assessment, assurance, threat modeling and mitigation advice/guidance for all aspects of digital delivery, including in-house and procured/third-party elements. Key outcomes from the roles are the identification of security risk within the business context, the identification of appropriate mitigation approaches for business selection and the management of these options through to implementation within the live service. The security advice provided will be informed by threat, vulnerability and risk analysis for business and third parties. The focus, outcomes and responsibilities are aligned to the Government Security Profession framework of the Cyber Security Risk Manager – Lead.

Responsibilities

• Supporting the development of business-focused security solutions for digital products and business operations that cover data collection, storage and processing of Official - Sensitive information (deployed both internally and via external suppliers); Identifying security threat and risk to the Organisation's digital products, data assets and business operations as part of the delivery lifecycle;
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation;
• Independently undertake risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures;
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation;
• Consulting with the Organisation’s security stakeholders to ensure that the solutions deployed are secure and fit for purpose;
• Liaising with the Organisation’s business, technology and security colleagues to ensure various business needs are understood and applied, including providing general security architecture, guidance and advice to the stakeholders;
• Advising on opportunities for using secure and open-source products and any implications of such an approach.
• Ensure that security policies and security controls remain appropriate and proportionate to the assessed risks, and are responsive and adaptable to the changing threat environment, business requirements and ONS policies;
• Provide tailored advice to a range of stakeholders on how to remedy identified risks by proportionately applying security capabilities, using published guidance, standards, and drawing on a range of experts as well as personal expertise;
• Provide expert security advice that highlights Cyber Security related risks, so risk or service owners can make well-informed and auditable decisions.

In return we offer:

• A market leading pension scheme - our employer contribution rate is around 28%
• A choice of working patterns: full-time, part-time, job-share.
• Maternity, adoption or shared parental leave of 26 weeks full pay (subject to qualifying criteria)
• Employee Assistance Programmes
• Diversity Network Groups
• Mental Health Allies
• Civil Service Sports and Social club
• Generous holiday allowance – 25 days annual leave, rising to 30 days after 5 years service in addition to 9 public holidays