Lead Cyber Security Risk Manager Head of Secure Design

Department for Work and Pensions (DWP); Lichfield; Hybrid; GBP 75,000 - 93,000; Full time

Benefits offered by this job

Hybrid working

Annual leave 25–30 days

Travel loans

Cycle to work

Employee discounts

Employee Assistance Programme

Professional development

Diversity networks

Job summary

Department for Work and Pensions (DWP) is seeking a Lead Cyber Security Risk Manager – Head of Secure Design within Working Age Services Digital. You will oversee secure design delivery across multiple multidisciplinary teams, shaping the security strategy for Universal Credit and related services used by millions of UK citizens.

The role requires extensive experience in information security and fraud risk management, hands-on leadership, and the ability to balance security with service

Qualifications

• Extensive experience in information security and fraud risk management.
• Hands-on leadership across secure design delivery and multidisciplinary service teams.
• Ability to align cyber controls with security strategy and risk management.

Responsibilities

• Lead security and fraud risk expertise and advise senior stakeholders.
• Establish and manage the Working Age Services security posture.
• Develop fraud risk management framework to minimize exposure.
• Oversee security tools: IDS, vulnerability mgmt, AV, encryption.
• Assess and mitigate threats, vulnerabilities and risks.
• Maintain awareness of information security technologies and fraud methodologies.
• Lead security awareness and education programs.
• Balance security requirements with service innovation.
• Incorporate external threat information.

Skills

Security leadership

Fraud risk management

Cyber security

Security tooling framework

Threat intelligence

Security awareness programs

Risk-based decision making

Cross-functional collaboration

Security controls alignment

Tools

Intrusion detection systems

Vulnerability management

Anti-virus software

Data encryption

Job description

Within Working Age Services Digital, weare responsible forseveralexisting services which support the core of society and is the departments highest profile benefit service, Universal Credit. We are looking foranoutstanding Lead Cyber Security Risk Manager- Head of Secure Designwho can make a positive impact and want to contribute to one of the most demanding and important Government services for the UK. Letsbe clear about the impact of your work,the products we build are changing the face of public services with the potential to dramatically transform the future of millions of people.Our services need to have security strength in depth principalsat its core both from cyber,fraudand errorviewpoints. We need someone who enjoys a challenge. Working Age Services is undergoing a period of technical change in line with our strategy aiming to become more consistent in our ways of working, more standardised in oursecuritystacks and transforming some of ourservice'smonolithic architectures into microservices. Youwilloverseethe teamthatidentify controls and make recommendations to address security vulnerabilities and control weaknesses in products, projects and programmes, working with product owners and Subject Matter Experts to enable them to make well informed risk-based decisions whilst leading and influencing the management of tactical and strategic risks. This role will play a vital role in the management of overall technical and fraud risk operations and the oversight of our security tooling framework. Your primary responsibilities will include the development and maintenance of security protocols, the mitigation of fraud risks and the actionable oversight of our various security tools. This position requires an individual with extensive experience in information security,web enabledfraud risk management. You will be a hands-on leader spanningthe secure designdeliveryteam butalsoworking withmultiple multidisciplinaryserviceteams to ensure that the Working Age Servicessecuritystrategy, that you help shape, is being enacted. A key aspect of this role will be towork with wider (Department for Work and Pensions) DWP Digital Security Risk Management ( DSRM) functions to ensure we have alignmentof cyber controls approach.This will also need to ensure weprovidecontrols metrics to enabledepartmental views of cyber rigour and clear and transparent., As Lead Cyber Security Risk Manager- Head of Secure Design, you will consider applicable standards for Security technical and fraud roadmaps, ensuring that high quality, secure and consistent solutions for Working Age Service benefits (incorporating Universal Credit) are delivered that meet the needs of our agents and claimants. Were looking for an outstanding security leader, who wants to play a major role in the design and implementation of exciting modern digital services for the UK Government. Youll be part of a team dedicated to the creation of Universal Credit which is actively delivering for 8.6 million citizens every day. In this role you will:

• Provide leadership to ensure effective security and fraud Riskexpertise, advice and support is delivered to include business managers, Senior RiskOwnersand theWorking Age Services SLTwithin DWP.
• Establish and manage theWorking Age Servicessecurity posture and initiatives, ensuring the protection of information assets from internal and external threats.
• Develop, manage, and enhance the fraud risk management framework to minimize the departments exposure to fraud risks.
• Oversee the implementation, management, and proper utilisation of security tools such as intrusion detection systems,vulnerabilitymanagement, anti-virus software, and data encryption.
• Assess and manage the identification and mitigation plans of existing and emerging security threats, vulnerabilities, and risks.
• Maintain ofawarenessin information security technologies and fraud risk management methodologies, applying best practices and drive knowledge throughWorking Age Services.
• Lead security awareness and education programs to encourage all employees tomaintaina high levelof vigilance. Expert knowledge of leadinginnovation in protective security,taking into accountthe need to balancesecurity requirements against service innovation.
• Expert in combining external threat information .

We also have a broad benefits package built around your work-life balance which includes:

• Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
• Generous annual leave at least 25 days on entry, increasing up to 30 days over time (prorata for part time employees), plus 9 days public and privilege leave.
• Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
• Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
• Family friendly policies including enhanced maternity and shared parental leave pay after 1 years continuous service.
• Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
• An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Womens Network, National Race Network, National Disability Network (THRIVE) and many more.

Hybrid Working

This role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work. If a hybrid working arrangement is suitable for the role and for you, you will normally be required to spend a minimum of 60% of your contracted working hours from your DWP office. If you have a disability, caring responsibilities, or other circumstances that may affect your ability to meet the minimum office attendance requirement, please discuss this with us using the contact details in this advert.

Salary Information

Pay for this role is from 75,026 to 92,522. The maximum salary for the grade is 80.267, however a Digital Allowance of up to 12,255 per annum is available for exceptional candidates. Digital Allowance is non-salary, and non-pensionable, and is classed as a temporary allowance. It is reviewed annually where it could be retained, amended or removed. Pay for this role in London is from 81,406 to 83,957. (Please refer to location details to check eligibility) Our offer to successful candidates will be based on an assessment of your skills and experience as demonstratedat interview. Existing Civil Servants who secure a new role on lateral transfer will maintainheir current substantive salary. Civil Servants who gain promotion will move to the bottom of the grade pay scale or receive a 10% increase applied to their current substantive salary, whichever is greater. Any temporary allowances that you are currently in receipt of will not form part of the calculation todetermineyour pay. Any allowances that are in payment will cease when you move into your new role. Alongside your salary of 75,026, Department for Work and Pensions contributes 21,735 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.