Principal Governance and Risk Manager

Department for Transport Group; Birmingham; Hybrid; GBP 58,000 - 82,000; Full time

Benefits offered by this job

Civil Service Pension 28.97%

25 days annual leave

Bank holidays + Privilege Day

Staff discount portal

Career development opportunities

Flexible working options

Employee Assistance Programme

Job summary

Department for Transport is seeking a Principal Governance and Risk Manager in Birmingham with a focus on strengthening risk management and organisational resilience. You will support informed decision-making by developing and embedding a robust risk framework across the Digital, Information and Security Directorate.

You will work with risk owners, senior stakeholders and assurance teams to drive continuous improvement, analyse complex risks and provide clear reporting to support strategic

Qualifications

• Essential industry qualification in risk management.
• Experience in protective security and/or information governance.
• Experience implementing a risk management framework in a large organisation.

Responsibilities

• Develop and implement the risk management framework within the Directorate in line with corporate governance.
• Lead risk management activities across complex scenarios and provide expert advice.
• Promote risk management and develop capability across teams with stakeholders.
• Oversee governance processes and develop risk reporting for the Directorate and group.
• Lead risk assessments and contribute to governance across the organisation.

Skills

Risk management

Education

Management of Risk Practitioner (or equivalent)

Tools

ISO 27001

NCSC Cyber Assessment Framework

GovS007

Job description

Principal Governance and Risk Manager

Department for Transport

Apply before 11:55 pm on Monday 12th October 2026

Location: Birmingham, Hastings, Leeds, Swansea (This role is suitable for hybrid working)

Salary: £57,515

The base pay is £57,515. In addition to this the role includes a Digital and Data allowance of up to £24,915 (82430).

A Civil Service Pension with an employer contribution of 28.97%

Contract Type: Permanent - Flexible working, Full-time, Job share, Part-time

Available Positions: 1

Join the Department for Transport's Digital, Information and Security Directorate and play a leading role in shaping how risks are managed across the Directorate and wider group. As a Principal Governance & Risk Manager, you will help strengthen risk management arrangements that support informed decision-making and organisational resilience.

Working within the Assurance, Compliance and Controls function, you'll develop and implement a risk management framework across Digital, Information and Security, ensuring risks are identified, assessed, monitored and reported effectively. You'll work closely with risk owners, senior stakeholders and assurance teams to provide expert advice on risk management strategies, drive continuous improvement and embed best practice across the organisation.

You'll analyse complex risks, oversee governance processes and provide clear, evidence-based reporting that supports strategic decision-making. Alongside this, you’ll champion risk management and develop capability across teams, building strong relationships with stakeholders across the wider DfT Group.

Top Responsibilities

• Developing and implementing the risk management framework within the Directorate in line with existing corporate governance arrangements.
• Leading and undertaking risk management activities while applying the fundamental principles of risk management to a range of complex scenarios
• Promoting risk management and the development of applicable skills, providing leadership to risk managers and sharing best practice.
• Leading risk assessments and providing expert advice on risk management strategies.
• Developing risk reporting mechanisms to support governance arrangements within the Directorate and across the group.

Benefits

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
• 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• Access to the staff discount portal.
• Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
• Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Flexible working options where we encourage a great work-life balance.

About You

• Essential Sift Criteria - Industry-recognised qualification in risk management is essential (e.g. Management of Risk Practitioner or similar).
• Experience of working within the field of protective security and/or information governance.
• Experience of having implemented a risk management framework within a large, complex organisation.
• Knowledge of relevant standards and assurance frameworks such as ISO 27001, NCSC’s Cyber Assessment Framework and Government Security Functional Standard GovS007.
• Experience of developing effective relationships and influencing a wide range of stakeholders to reduce risk.

Additional information

The role is part of the Government Security Profession Career Framework and utilises an enhanced Capability-Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £57,515. In addition to this the role includes a Digital and Data allowance of up to £24,915.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

This vacancy closes at 23:55 on Monday 12th October 2026