Cyber Security Risk Lead — Secure by Design

Office for National Statistics; Newport; On-site; GBP 60,000 - 67,000; Full time

Benefits offered by this job

Pension scheme

Flexible working

9 public holidays

6 weeks maternity/adoption

Employee assistance

Diversity networks

Mental health allies

Sports & social club

Generous holiday allowance

Job summary

The Office for National Statistics is recruiting a Cyber Security Risk Manager – Lead to join the Security Risk Advisory team within the Security and Information Management Division. You will provide security advice to embed the ONS Security Framework and support digital programmes including Census 2031.

Responsibilities include risk assessments, threat modeling, security governance, advising on secure/open-source options, and ensuring policies remain proportionate to risks; you will work with

Qualifications

• Experience in cyber security risk management and assurance within large organisations.
• Ability to conduct risk assessments and threat modeling across complex digital services.
• Proven track record of advising stakeholders and aligning security with business goals.

Responsibilities

• Lead risk assessments and threat modeling for UKSA digital programmes.
• Provide security guidance to embed the ONS Security Framework across projects.
• Coordinate with stakeholders to ensure secure-by-design solutions.
• Advise on secure/open-source options and governance to mitigate risk.
• Ensure policies and controls remain proportional to assessed threats.

Skills

Security risk assessment

Threat modeling

Stakeholder engagement

Governance & compliance

Job description

The Office for National Statistics is recruiting a Cyber Security Risk Manager – Lead to join the Security Risk Advisory team within the Security and Information Management Division. You will provide security advice to embed the ONS Security Framework and support digital programmes including Census 2031.

Responsibilities include risk assessments, threat modeling, security governance, advising on secure/open-source options, and ensuring policies remain proportionate to risks; you will work with