Senior Cyber Risk & Compliance Lead

Driver and Vehicle Standards Agency; Nottingham; On-site; GBP 75,000 - 105,000; Full time

Benefits offered by this job

Pension 28.97%

Flexible working

Annual leave & bank holidays

Job summary

Driver and Vehicle Standards Agency seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cybersecurity risks across DVSA's digital infrastructure. The role involves developing risk management strategies and ensuring compliance with government security standards.

You will communicate with both technical and non-technical stakeholders, provide risk-based guidance, and drive governance with the Head of Cyber Assurance to safeguard critical operations against evolving threats.

Qualifications

• Knowledge of cybersecurity frameworks (e.g., NCSC guidance) and risk assessment methodologies.
• Experience in threat intelligence, risk treatment, and risk-based decision making.
• Ability to communicate complex security concepts to technical and non-technical stakeholders.

Responsibilities

• Identify, understand and mitigate cyber risks across DVSA's digital infrastructure.
• Provide risk-based advice to risk owners for informed decisions; align with Security Policy Framework and NCSC standards.
• Lead risk assessments, threat assessments and ensure compliance with relevant regulations and legislation.
• Advise on remediation actions using published guidance and expert input.
• Ensure DVSA's compliance with HMG Security Policy Framework, NCSC CAF, and NIST principles.
• Lead and guide staff while upholding integrity and DVSA reputation.
• Oversee incident response as directed by Head of Cyber Assurance.

Skills

Cybersecurity frameworks

Risk assessment

Threat management

Stakeholder communication

Education

Bachelor's degree in Cyber/Security

Tools

NIST

CAF

Job description

Driver and Vehicle Standards Agency seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cybersecurity risks across DVSA's digital infrastructure. The role involves developing risk management strategies and ensuring compliance with government security standards.

You will communicate with both technical and non-technical stakeholders, provide risk-based guidance, and drive governance with the Head of Cyber Assurance to safeguard critical operations against evolving threats.