Principal Cyber Risk Manager — Cyber Security Leader

Ad Warrior Ltd; Ledston; Hybrid; GBP 52,000 - 63,000; Full time

Benefits offered by this job

Employer pension contribution 28.97%

Flexible working options

25 days annual leave (+1 per year up>

Job summary

DVSA is seeking a Principal Cyber Security Risk Manager to join the security function in Leeds/UK-wide. You will lead a small team, consolidate risk across services, and influence architecture patterns to strengthen the organisation’s cyber risk posture.

You will collaborate with Service Owners, IT teams, and security professionals to embed secure design in the service lifecycle and to deliver risk-based decisions aligned with risk appetites.

Qualifications

• Chartered Cyber Professional or willingness to work towards chartered status.
• Experience in cloud security across AWS or Azure and commitment to formal training/certifications.
• Inquisitive with ability to understand full service and product context in a matrix team.
• Ability to make evidenced-based recommendations to Service Owners and Senior Security Leadership.
• Part of a wider Security profession; capable of providing strategic influence within Services and Products.

Responsibilities

• Lead risk management activities for complex scenarios, ensuring regulatory and legislative compliance.
• Direct specialist activities and promote development of skills within the security team.
• Lead analysis and derivation of complex security needs across services.
• Oversee Cyber Security risk assessments and governance arrangements.
• Provide guidance to ensure ongoing confidence that security needs are met and risk is managed.
• Shape leadership decisions through effective reporting and communications on security processes.

Skills

Cyber security

Risk management

Leadership

Cloud security

AWS

Azure

Regulatory compliance

Education

Chartered Cyber Professional

Tools

AWS

Azure

Job description

DVSA is seeking a Principal Cyber Security Risk Manager to join the security function in Leeds/UK-wide. You will lead a small team, consolidate risk across services, and influence architecture patterns to strengthen the organisation’s cyber risk posture.

You will collaborate with Service Owners, IT teams, and security professionals to embed secure design in the service lifecycle and to deliver risk-based decisions aligned with risk appetites.