Deputy CISO: Cyber GRC & Strategy Leader

UK Home Office; Sheffield; On-site; GBP 90,000 - 105,000; Full time

Benefits offered by this job

Flexible working options

Civil Service pension

Learning and development tailored to a

Diversity and inclusion

Job summary

The Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) at the UK Home Office leads cyber GRC, strategy and professional practice with enterprise-wide accountability. Reporting to the CISO, the post holder defines the operating model and ensures governance, standards and reporting align with the threat landscape and government policy.

You will oversee heads of governance, risk, compliance and business management, shape capability planning, recruitment and

Qualifications

• Experience leading enterprise-scale cyber governance, risk and professional practice.
• Ability to influence senior leaders across business, digital, technology and security.
• Provide authoritative advice, assurance and constructive challenge on cyber security matters at executive and board level.
• Championing a strong cyber security culture, continuous improvement and value for money across the organisation.

Responsibilities

• Own and evolve the cyber security GRC and cyber practice strategy, aligning with Home Office priorities and cross-government policy.
• Provide strategic leadership of second line cyber risk and assurance, set priorities and report actionable insights to senior leadership.
• Set and assure enterprise cyber security policies, standards, frameworks and reusable patterns.
• Own the cyber reporting framework with metrics, dashboards and MI to oversee cyber risk and performance.
• Lead capability and workforce planning, recruitment, standards and succession planning for cyber professionals.
• Build and sustain relationships with senior leaders across Home Office and external bodies like NCSC & UK Cyber Security Council.
• Deputise for the CISO and manage multiple G6 leads.

Skills

Senior leadership

Cyber governance

Risk management

Stakeholder engagement

Job description

The Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) at the UK Home Office leads cyber GRC, strategy and professional practice with enterprise-wide accountability. Reporting to the CISO, the post holder defines the operating model and ensures governance, standards and reporting align with the threat landscape and government policy.

You will oversee heads of governance, risk, compliance and business management, shape capability planning, recruitment and