Deputy CISO — Cyber Strategy, GRC & Risk | Flexible Work

UK Home Office; Cardiff; On-site; GBP 90,000 - 105,000; Full time

Benefits offered by this job

Learning & development

Flexible working options

Inclusion & diversity

Civil Service pension with 28.97%

Job summary

UK Home Office seeks a Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) to lead cyber GRC, strategy, and professional practice across the organisation. You will provide enterprise-wide leadership and second-line assurance over cyber risk management, policy, standards and reporting, ensuring risk is understood and managed appropriately.

Reporting to the CISO, you will set the strategic direction, drive governance, and lead heads of governance, risk,

Qualifications

• Experience leading enterprise-scale cyber governance, risk and compliance functions.
• Ability to influence senior leaders across business, digital, technology and security.
• Proven track record of providing authoritative cyber security advice at executive/board level.
• Champions a strong cyber security culture and continuous improvement.

Responsibilities

• Owning and evolving the cyber security GRC and practice strategy across the organisation.
• Providing strategic leadership of second line cyber risk, assurance and reporting.
• Setting and assuring enterprise cyber security policies, standards and frameworks.
• Owning the cyber reporting framework with metrics and dashboards.
• Leading capability and workforce planning for cyber professionals.
• Building relationships with senior leaders across Home Office and government.
• Deputising for the CISO and overseeing SMT leadership.

Skills

Cyber governance

Cyber risk management

GRC

Strategy leadership

Policy & standards

Stakeholder engagement

Leadership

Job description

UK Home Office seeks a Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) to lead cyber GRC, strategy, and professional practice across the organisation. You will provide enterprise-wide leadership and second-line assurance over cyber risk management, policy, standards and reporting, ensuring risk is understood and managed appropriately.

Reporting to the CISO, you will set the strategic direction, drive governance, and lead heads of governance, risk,