Group Cyber Security Assurance Principal

Department for Transport (DfT), United Kingdom; Greater London; Hybrid; GBP 62,000 - 82,000; Full time

Benefits offered by this job

Civil Service Pension

Annual Leave 25 days

Bank Holidays

Staff discount portal

Career development

Employee Assistance Program

Flexible working

Job summary

Department for Transport in London is seeking a Group Cyber Security Assurance Principal to strengthen cyber resilience across the Department. You will lead assurance, provide expert guidance on governance, risk management and security controls, and oversee the GCAP across the group.

The role requires delivering cyber security assurance, monitoring NCSC CAF compliance, and driving continuous improvement in security maturity within a large government organisation.

Qualifications

• Experience implementing cyber security policies and assurance frameworks in a large organisation.
• Strong knowledge of security threats, risk management and mitigation strategies.
• Experience with incident response and crisis management.
• Knowledge of ISO 27001/2, NCSC CAF and GovS 007 security.
• Willingness to pursue industry certifications in information risk and ISO 27001 (e.g., CISSP).

Responsibilities

• Overseeing the delivery of the GCAP across the group.
• Developing and implementing the cyber security assurance framework across the group.
• Leading cyber security risk assessments and risk management activities.
• Leading the assurance of 'secure by design' principles across the DfT Group.
• Reviewing and reporting on compliance with NCSC CAF and monitor progress of action plans.

Skills

Cyber security policy implementation

Risk management

Incident response

Security governance

ISO 27001/2 knowledge

NCSC CAF familiarity

Crisis management

Secure by design

Education

ISO 27001 / information risk certifications

Job description

477691 Group Cyber Security Assurance Principal

Department for Transport

Apply before 11:55 pm on Sunday 11th October 2026

Location:

London (This role is suitable for hybrid working)

The base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

A Civil Service Pension with an employer contribution of 28.97%

As a Group Cyber Security Assurance Principal, you'll play a leading role in strengthening cyber resilience across the Department for Transport Group. You'll provide expert assurance, oversight and guidance to help ensure security controls are effective, risks are managed appropriately and government security requirements are consistently applied.

Working within the Assurance, Compliance and Controls function, you'll lead cyber security assurance activities across a complex organisational landscape. You'll oversee the delivery of the Government Cyber Action Plan (GCAP), monitor compliance with the NCSC Cyber Assessment Framework and champion the application of Secure by Design principles across the DfT Group.

You'll work closely with senior stakeholders to assess cyber risks, develop assurance frameworks and provide expert advice on security governance, compliance and risk management. You'll also support the implementation of targeted improvement plans, communicate emerging threats and help drive continuous improvement in cyber security maturity across the organisation.

Top Responsibilities

• Overseeing the delivery of the GCAP across the group.
• Developing and implementing the cyber security assurance framework across the group.
• Leading cyber security related risk assessments and other expert risk management activities and enhance cyber security governance arrangements.
• Leading the assurance of 'secure by design' principles across the DfT Group.
• Reviewing and reporting on the Group's compliance with NCSC's Cyber Assessment Framework and monitor the progress of action plans to improve compliance.

For more information on the role and responsibilities please see the full job advert on CS Jobs using the link provided.

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King's birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

About You

To be successful in this role you will need to have the following experience:

• Experience of implementing cyber security policies, standards, and assurance frameworks in a large, complex organisation to improve compliance
• Strong knowledge of security threats, risk management, and mitigation strategies.
• Experience of incident response and crisis management.
• Knowledge of protective security, ISO 27001/2, NCSC's Cyber Assessment Framework and Government Functional Standard GovS 007: Security
• Experience delivering quality service in high-pressure environments.
• Professional qualifications or willingness to work towards industry-recognised qualifications in information risk and ISO 27001 (e.g. Management of Risk Practitioner, Certified ISO 27001 Practitioner and/or CISSP)

Additional information

The role is part of the Government Security Profession Career Framework and utilises an enhanced Capability-Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £62,034. In addition to this the role includes a Digital and Data allowance of up to £20,396.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

This vacancy closes at 23:55 on Sunday 11th October 2026