Deputy CISO: Cyber Strategy, GRC & Flexible Working

UK Home Office; Salford; On-site; GBP 90,000 - 105,000; Full time

Benefits offered by this job

Learning and development tailored to你的

Flexible working options

Inclusion and diversity

Civil Service pension with employer 28

Job summary

UK Home Office is seeking a Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) to lead the cyber GRC function, strategy and professional practice across the organisation.

Reporting to the CISO, you will shape risk appetite, metrics and reporting, and build capability with heads of governance, risk, compliance and professional practice to deliver an integrated cyber security program for government operations.

Qualifications

• You will have a demonstrable passion for cyber security, with proven experience operating at enterprise scale, and the ability to lead complex governance, risk and professional practice functions.

Responsibilities

• Owning and evolving the cyber security GRC and cyber practice strategy, ensuring alignment with Home Office priorities, Digital First Transformation Programme and cross government policy.
• Providing strategic leadership of second line cyber risk and assurance, including setting assurance priorities, aggregating and analysing enterprise cyber risk, and reporting clear, actionable insights to senior leadership and governance forums.
• Setting, maintaining and assuring enterprise cyber security policies, standards, frameworks and reusable patterns, ensuring they are proportionate, risk based and consistently applied across Product Family Groups and Platforms.
• Owning the cyber reporting framework, including defining metrics, dashboards and management information to support effective oversight of cyber risk, maturity and performance.
• Leading the cyber security professional practice, including capability and workforce planning, recruitment, standards, career pathways, professional assurance and succession planning. Including, overseeing the prioritisation and allocation of cyber professionals, balancing demand, capacity and capability.
• Building and sustaining strong, trusted relationships with senior business, digital, technology and security leaders across the Home Office and wider government, including representing the cyber GRC and practice function externally with bodies such as NCSC & UK Cyber Security Council.
• Deputising for the CISO as required, including representing the function on the CISO Senior Management Team (SMT) and supporting senior decision-making and governance. Providing direct line management and leadership for multiple G6 leads

Job description

UK Home Office is seeking a Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) to lead the cyber GRC function, strategy and professional practice across the organisation.

Reporting to the CISO, you will shape risk appetite, metrics and reporting, and build capability with heads of governance, risk, compliance and professional practice to deliver an integrated cyber security program for government operations.