Senior Cyber Security Risk Lead | Flexible Working

DVSA.GOV; Greater London; On-site; GBP 40,000 - 49,000; Full time

Benefits offered by this job

Pension 28.97%

25 days annual leave + 8 bank holidays

Flexible working

Staff discount portal

Career development opportunities

Diversity & inclusion

Employee Assistance Program

Privilege Day for King's birthday

Job summary

DVSA is seeking a Lead Cyber Security Risk Manager to lead efforts to identify, assess, and mitigate cybersecurity risks within the agency’s digital infrastructure. The role develops risk management strategies, ensures compliance with government security standards, and collaborates with departments to protect data and systems.

The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively

Qualifications

• Solid understanding of risk management and threat intelligence.
• Excellent verbal and written communication across all levels.
• Experience leading diverse teams and managing stakeholders.
• Ability to work with external organisations and internal departments.
• Experience aligning with government security standards and risk frameworks.

Responsibilities

• Identify, understand and mitigate cyber risks and advise risk owners.
• Ensure compliance with information legislation and Security Policy Frameworks.
• Lead risk assessments and tailored threat analyses for DVSA assets.
• Provide proportionate security guidance to stakeholders and ensure governance.
• Lead incident response as directed by Head of Cyber Assurance and coordinate with SOC.

Skills

Risk management

Cybersecurity frameworks

Communication

Leadership

Incident response

Job description

DVSA is seeking a Lead Cyber Security Risk Manager to lead efforts to identify, assess, and mitigate cybersecurity risks within the agency’s digital infrastructure. The role develops risk management strategies, ensures compliance with government security standards, and collaborates with departments to protect data and systems.

The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively