Lead Cyber Security Risk & Assurance Manager

UK Home Office; Glasgow; Hybrid; GBP 63,000 - 67,000; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

8 public holidays + 1 privilege day

Hybrid office/work arrangement (60% in

Job summary

UK Home Office is seeking a Lead Cyber Security Risk Manager to oversee risk-based assurance across projects and live services. You will lead the development of risk management processes, challenge risk assessments, and advise senior stakeholders on risk mitigation throughout the service lifecycle.

You will join a team of cyber security professionals focused on reducing exposure to cyber-attack of critical digital systems.

Qualifications

• Essential skills include information or cyber security with threat and risk analysis for complex, high-risk systems.
• Ability to lead and oversee cyber security risk/assurance practitioners with professional judgment.
• Experience in implementing security policies in large organisations balancing security and business needs.
• Capability to champion cyber security risk and ensure ongoing practices.
• Proven track record implementing risk, assurance, or governance processes.
• Familiarity with NIST, ISO27001, COBIT and NCSC guidelines.

Responsibilities

• Independently undertake risk management activities within governance structures and lead risk assessments and assurance practices.
• Lead proportionate, risk-based second‑line cyber security assurance across projects and services with clear, evidence-based opinions.
• Develop and assure organisation-wide risk management policies, embedding Secure by Design principles where appropriate.
• Communicate with senior stakeholders to convey risk implications and provide independent challenge.
• Manage risk processes, review controls after incidents and oversee remediation and assurance findings.
• Ensure risks are managed in line with Home Office risk management policies and remediation activity.

Skills

Threat and risk analysis

Leadership of cyber risk/assurance

Policy development

Communication with senior stakeholders

Risk management governance

Cyber risk frameworks (NIST ISO27001,

Job description

UK Home Office is seeking a Lead Cyber Security Risk Manager to oversee risk-based assurance across projects and live services. You will lead the development of risk management processes, challenge risk assessments, and advise senior stakeholders on risk mitigation throughout the service lifecycle.

You will join a team of cyber security professionals focused on reducing exposure to cyber-attack of critical digital systems.