Principal Cyber Security Risk Manager

DVSA.GOV; Uxbridge; On-site; GBP 52,000 - 63,000; Full time

Benefits offered by this job

Employer pension 28.97%

25 days annual leave + bank holidays

Flexible working

Kings Birthday privilege day

Job summary

DVSA is seeking a Chartered Cyber Professional to lead risk management and governance across a growing cyber function. The role focuses on cloud security (AWS/Azure), evidence-based decision making, and strategic influence across services and products.

You will guide senior leadership, collaborate with developers, UX, delivery, and business analysts, and shape security strategy within a matrix-style organisation. The position offers flexible working and permanent employment in the UK.

Qualifications

• Chartered Cyber Professional status or willingness to work towards chartered status.
• Experience in cloud security across at least one platform (AWS or Azure).
• Ability to understand the context of the full service and product suite supported.

Responsibilities

• Lead and undertake risk management activities against complex scenarios.
• Lead regulatory or legislative compliance activities.
• Direct specialist activities of others and share best practices across sectors.
• Lead analysis and derivation of complex security needs.
• Lead cyber security risk assessments and other expert risk management activities.
• Provide guidance on cyber security governance arrangements.
• Ensure ongoing confidence that fundamental security needs are met.
• Integrate assurance approaches to maintain confidence for owners.
• Shape leadership decisions with effective reporting on security effectiveness.
• Provide recommendations to solve highly complex cyber risk management problems.
• Act as SME for complex cyber risk management concerns.

Skills

Chartered Cyber Professional

Cloud security

Leadership

Evidence-based decisions

Matrix teamwork

Job description

Salary: £57,515 - 57,515 per year

Requirements

• We are seeking a Chartered Cyber Professional, or someone willing to work towards becoming Chartered.
• We require experience in cloud security across at least one platform, such as AWS or Azure, and willingness to undertake formal training and certifications in this area.
• We are looking for someone who is inquisitive and enjoys understanding the context of the full service and product suite they support.
• We need experience working in a matrix team with roles such as developers, user experience, service design, and business analysis.
• We are looking for someone who can make evidence-based recommendations to Service Owners and Senior Security Leadership on the level of security risk being managed within each product.
• We need someone who can support the development of the wider security profession in a leadership role and bring strategic influence to local services and products.

Responsibilities

• Lead and undertake risk management activities against the hardest or most novel scenarios, applying the fundamental principles of risk management to a range of complex scenarios.
• Lead regulatory or legislative compliance activities.
• Guide and direct the specialist activities of others, promoting development in the relevant skills, providing leadership to other risk managers, and sharing best practice across government, the public sector, and industry.
• Lead the analysis and derivation of complex security needs.
• Lead cyber security-related risk assessments and other expert risk management activities.
• Provide guidance on establishing the organisations cyber security-related governance arrangements.
• Provide guidance to ensure ongoing confidence that fundamental organisational security needs have been met.
• Integrate a range of assurance approaches and techniques to give continued confidence to the risk, service, or system owner.
• Shape leadership decision-making through effective reporting and communication on the effectiveness of security processes across the organisation.
• Shape leadership decision-making by providing recommendations to highly complex problems.
• Shape leadership decision-making by acting as a subject matter expert for complex cyber risk management concerns, issues, and problems.

Technologies

• AWS
• Azure
• Cloud
• Support
• Matrix
• Security

More

We are DVSA and we are continuing to strengthen security capability across the business. This role sits within a growing cyber function focused on embedding and maintaining an assurance and response function that protects our services and customer data. Our work also supports our refreshed Data Strategy, helping us remain evidence based and data driven while maintaining an appropriate level of security for our services and data. We work closely with the wider Security function, service owners, and multidisciplinary teams to build security into the service development lifecycle and strategic planning. The role also involves providing the consolidated risk picture for products within a service, recommending risk acceptance aligned to defined risk appetites, leading a small service group team of security professionals, and engaging with enterprise architecture processes via the Security Architecture function to influence pattern adoption. We offer a salary of £57,515 per annum, a permanent role with flexible, full-time, job share and part-time options, and locations in Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham (Chadderton), Birmingham (Garretts Green), or Uxbridge. Our benefits include an employer pension contribution of 28.97%, 25 days annual leave rising by 1 day each year up to 30 days, plus 8 bank holidays and a privilege day for the Kings birthday, as well as flexible working to support work-life balance.

last updated 38 week of 2026