Lead Cyber Security Risk Manager

Driver and Vehicle Standards Agency (DVSA); West of England; Hybrid; GBP 40,000 - 49,000; Full time

Benefits offered by this job

Employer pension contribution 28.97%

25 days annual leave

8 Bank Holidays + Privilege Day

Staff discount portal

Career development opportunities and资格

Job summary

Driver and Vehicle Standards Agency (DVSA) is seeking a Lead Cyber Security Risk Manager to identify, assess and mitigate cyber risks across its digital infrastructure. The role requires expertise in risk management, cyber threat assessment, and collaboration with multiple departments to protect sensitive data and systems.

The position offers hybrid working across multiple UK locations and an enhanced package including a base salary of £44,241 plus an additional Digital and Data allowance up to

Qualifications

• Clear understanding of risk management, including threat intelligence and how risk appetite influences advice.
• Strong communicator, both verbally and in writing, with colleagues at all levels.
• Experience leading diverse teams and delivering challenging objectives.
• Collaborates effectively with external organisations and stakeholders.

Responsibilities

• Identify, understand and mitigate cyber risks; advise risk or service owners.
• Ensure compliance with information legislation and Security Policy Framework/NCSC standards.
• Lead security needs analysis, carry out risk assessments and tailored threat assessments.
• Provide tailored advice to remediate identified risks using published guidance and best practices.

Skills

Risk management

Communication

Leadership

Stakeholder collaboration

Job description

Apply before 11:55 pm on Sunday 11th October 2026

Location: Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green) or Uxbridge. (This role is suitable for hybrid working)

Candidates based in Yeading/Uxbridge will receive the London Weighting allowance of £4,000

Plus an additional Government Digital and Data Profession allowance (non-pensionable) up to £14,756

A Civil Service Pension with an employer contribution of 28.97%

The Lead Cyber Security Risk Manager will lead efforts to identify, assess, and mitigate cybersecurity risks within the agency's digital infrastructure. This role involves developing risk management strategies, ensuring compliance with government security standards, and collaborating with various departments to protect sensitive data and systems. The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders. The position is critical to safeguarding the agency's mission and operations against evolving cyber threats.

Top Responsibilities

• The Lead Cyber Security Risk Manager identifies, understands and mitigates cyber-related risks, and provides risk or service owners with advice to help them make well informed risk-based decisions; focusing on:
• Project activity to ensure compliance with information legislation and DVSA policy particularly HMG's Security Policy Framework, and National Cyber Security Centre (NCSC) Standards.
• Raising risks as necessary to respond to any non-compliance and provides direction for Information Management and Security to manage the ongoing assurance of DVSAs information assets and products, and liaising with Department for Transport Assurance Authority or equivalent, when necessary.
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation
• Provide tailored advice to a range of stakeholders on how to remedy identified risks by proportionately applying security capabilities, using published guidance, standards, and drawing on a range of experts as well as personal expertise

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King's birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.

About You

To be successful in this role you will need to have the following experience:

• Someone who has a clear understanding of risk management, including the threat intelligence environment and how risk appetite influences advice provided.
• A proven and adaptable communicator and listener, you will be highly skilled in the delivery and absorption of information, both verbally and in writing, with colleagues at all levels.
• A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
• A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
• Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation

Government Digital and Data Allowance

The role is part of the Government Digital and Data (or Government Security Profession Career Framework) profession and utilises an enhanced Capability-Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £44,241. In addition to this the role includes a Digital and Data allowance of up to £14,756.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

This vacancy closes at 23:55 on Sunday 11th October 2026