Lead Cyber Security Risk Manager

DVSA.GOV; Greater London; On-site; GBP 40,000 - 49,000; Full time

Benefits offered by this job

Pension 28.97%

25 days annual leave + 8 bank holidays

Flexible working

Staff discount portal

Career development opportunities

Diversity & inclusion

Employee Assistance Program

Privilege Day for King's birthday

Job summary

DVSA is seeking a Lead Cyber Security Risk Manager to lead efforts to identify, assess, and mitigate cybersecurity risks within the agency’s digital infrastructure. The role develops risk management strategies, ensures compliance with government security standards, and collaborates with departments to protect data and systems.

The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively

Qualifications

• Solid understanding of risk management and threat intelligence.
• Excellent verbal and written communication across all levels.
• Experience leading diverse teams and managing stakeholders.
• Ability to work with external organisations and internal departments.
• Experience aligning with government security standards and risk frameworks.

Responsibilities

• Identify, understand and mitigate cyber risks and advise risk owners.
• Ensure compliance with information legislation and Security Policy Frameworks.
• Lead risk assessments and tailored threat analyses for DVSA assets.
• Provide proportionate security guidance to stakeholders and ensure governance.
• Lead incident response as directed by Head of Cyber Assurance and coordinate with SOC.

Skills

Risk management

Cybersecurity frameworks

Communication

Leadership

Incident response

Job description

Lead Cyber Security Risk Manager

Location: Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green) or Uxbridge.

Salary: £44,241 per annum

Vacancy Type: Permanent, Flexible working, Full-time, Job share, Part-time

Closing Date: Sunday 11th October 2026

The Lead Cyber Security Risk Manager will lead efforts to identify, assess, and mitigate cybersecurity risks within the agency’s digital infrastructure. This role involves developing risk management strategies, ensuring compliance with government security standards, and collaborating with various departments to protect sensitive data and systems. The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders. The position is critical to safeguarding the agency’s mission and operations against evolving cyber threats.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary.
• 25 days annual leave, increasing by 1 day each year of service, plus 8 bank holidays a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Your responsibilities will include, but aren’t limited to:

• The Lead Cyber Security Risk Manager identifies, understands and mitigates cyber-related risks, and provides risk or service owners with advice to help them make well informed risk-based decisions; focusing on:
  • Project activity to ensure compliance with information legislation and DVSA policy particularly HMG’s Security Policy Framework, and National Cyber Security Centre (NCSC) Standards.
  • Raising risks as necessary to respond to any non-compliance and provides direction for Information Management and Security to manage the ongoing assurance of DVSAs information assets and products, and liaising with Department for Transport Assurance Authority or equivalent, when necessary.
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation
• Provide tailored advice to a range of stakeholders on how to remedy identified risks by proportionately applying security capabilities, using published guidance, standards, and drawing on a range of experts as well as personal expertise
• Responsibility for ensuring DVSA’s compliance with key principles and outcomes outlined in HMGs Security Policy Framework, National Cyber Security Centre (NCSC), Cyber Assessment Framework (CAF) and or National Institute of Standards and Technology (NIST), to Cyber and related governance models and supporting the reporting of these to DfT and Cabinet Office.
• With responsibility for direct reports, you will demonstrate leadership by providing guidance to staff to support the delivery of objectives. Manage and engage with honesty and integrity, and upholding the reputation of the Agency, Department and Civil Service.
• Leads incident response as directed by the Head of Cyber Assurance, including responding to alerts from any Security Operations Centre monitoring DVSA Systems.

Person specification

To be successful in this role you will need to have the following experience:

• Someone who has a clear understanding of risk management, including the threat intelligence environment and how risk appetite influences advice provided.
• A proven and adaptable communicator and listener, you will be highly skilled in the delivery and absorption of information, both verbally and in writing, with colleagues at all levels.
• A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
• A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation

Benefits

• Employer pension contribution of 28.97% of your salary.
• 25 days annual leave, increasing by 1 day each year of service
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.