Hybrid Cyber Security Assurance Principal - Lead GCAP

Department for Transport (DfT), United Kingdom; Greater London; Hybrid; GBP 62,000 - 82,000; Full time

Benefits offered by this job

Civil Service Pension

Annual Leave 25 days

Bank Holidays

Staff discount portal

Career development

Employee Assistance Program

Flexible working

Job summary

Department for Transport in London is seeking a Group Cyber Security Assurance Principal to strengthen cyber resilience across the Department. You will lead assurance, provide expert guidance on governance, risk management and security controls, and oversee the GCAP across the group.

The role requires delivering cyber security assurance, monitoring NCSC CAF compliance, and driving continuous improvement in security maturity within a large government organisation.

Qualifications

• Experience implementing cyber security policies and assurance frameworks in a large organisation.
• Strong knowledge of security threats, risk management and mitigation strategies.
• Experience with incident response and crisis management.
• Knowledge of ISO 27001/2, NCSC CAF and GovS 007 security.
• Willingness to pursue industry certifications in information risk and ISO 27001 (e.g., CISSP).

Responsibilities

• Overseeing the delivery of the GCAP across the group.
• Developing and implementing the cyber security assurance framework across the group.
• Leading cyber security risk assessments and risk management activities.
• Leading the assurance of 'secure by design' principles across the DfT Group.
• Reviewing and reporting on compliance with NCSC CAF and monitor progress of action plans.

Skills

Cyber security policy implementation

Risk management

Incident response

Security governance

ISO 27001/2 knowledge

NCSC CAF familiarity

Crisis management

Secure by design

Education

ISO 27001 / information risk certifications

Job description

Department for Transport in London is seeking a Group Cyber Security Assurance Principal to strengthen cyber resilience across the Department. You will lead assurance, provide expert guidance on governance, risk management and security controls, and oversee the GCAP across the group.

The role requires delivering cyber security assurance, monitoring NCSC CAF compliance, and driving continuous improvement in security maturity within a large government organisation.