Senior Cyber Risk & Security Leader (Hybrid)

DVSA.GOV; East Midlands; Hybrid; GBP 52,000 - 63,000; Full time

Benefits offered by this job

Employer pension contribution 28.97%

25 days annual leave

Flexible working options

Job summary

DVSA.GOV in the United Kingdom is recruiting a Principal Cyber Security Risk Manager to consolidate risk across products and services, guiding a small security team and aligning risk appetite with enterprise governance. The role focuses on embedding secure development lifecycle practices and providing a trusted risk picture for service owners.

You will work with Security and Enterprise Architecture teams to influence patterns, report on risk effectiveness, and lead complex cyber risk

Qualifications

• Chartered Cyber Professional status or willingness to work towards Chartered.
• Experience in cloud security across AWS or Azure.
• Ability to work in a matrix team with developers, UX and service design, and business analysis.
• Evidence-based risk management recommendations to Service Owners and Security Leadership.
• Leadership to the Security profession and strategic influence within services.

Responsibilities

• Lead and undertake risk management activities against complex scenarios.
• Guide and direct specialists, promoting development and sharing best practice.
• Lead analysis and derivation of complex security needs.
• Lead cyber security risk assessments and governance arrangements.
• Provide guidance to ensure ongoing confidence that fundamental security needs are met.
• Shape leadership decision-making through effective reporting and recommendations.
• Support line management development in line with Civil Service standards.

Skills

Chartered Cyber Professional

Cloud security (AWS/Azure)

Risk management leadership

Stakeholder influence

Security governance

Tools

AWS

Azure

Job description

DVSA.GOV in the United Kingdom is recruiting a Principal Cyber Security Risk Manager to consolidate risk across products and services, guiding a small security team and aligning risk appetite with enterprise governance. The role focuses on embedding secure development lifecycle practices and providing a trusted risk picture for service owners.

You will work with Security and Enterprise Architecture teams to influence patterns, report on risk effectiveness, and lead complex cyber risk