Senior Cyber Security Risk Manager

United Kingdom Government; Salford; Hybrid; GBP 68,000 - 108,000; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

8 public holidays + 1 privilege day

Digital capability-based allowance

Job summary

United Kingdom Government is seeking a full-time cyber security risk management professional. You will lead risk assessment activities, develop risk treatment plans, and communicate complex risks to diverse stakeholders within a government context.

The role requires structuring audits, maintaining audit trails, and championing best-practice risk controls across multiple teams. This position may involve occasional travel and hybrid working arrangements.

Qualifications

• We are looking for demonstrable experience in Cyber Security.
• We need experience reviewing and performing risk assessments, developing risk treatment plans, and communicating risks to others.
• We need the ability to identify typical risk indicators and explain prevention measures.
• We need experience adopting a structured approach to executing and documenting audits, following agreed standards.
• We need experience maintaining the integrity of records to support and satisfy audit trails.
• We need the ability to champion cyber security risk and ensure the ongoing appropriateness of practices.
• We need the ability to communicate technical requirements effectively to both technical and non-technical stakeholders.

Responsibilities

• We plan and implement organisation-wide processes and procedures for the management of risk.
• We monitor the efficiency and effectiveness of risk management processes across the organisation and make recommendations for continuous improvement.
• We develop risk management-related policy and assure its ongoing appropriateness in line with regulation and wider organisational and government policies.
• We support the embedding of risk management systems, processes, and frameworks across the business and communicate these to a range of stakeholders.
• We work within established security and risk management governance structures to support, review, and undertake risk management activities, including cyber security risk assessments, threat assessments, and other risk management activities.
• We communicate risk assessment outcomes to stakeholders in ways that support effective security, risk management, and decision-making.
• We provide advice to address straightforward cyber security risks by applying security capabilities, including published guidance or standards, and validating the effectiveness of risk mitigation measures.
• We help risk or service owners make well-informed decisions by providing clear security advice and contributing to reports or working within established reporting chains in a security team.
• We provide risk-oriented training to a range of stakeholders, including preparing training materials, so relevant stakeholders are equipped to use standard risk management frameworks.

Skills

Cyber security

Risk assessment

Auditing

Stakeholder communication

Risk management

Tools

MS Teams

REST

Job description

Salary: £68,000 - 108,000 per year

Requirements

• We are looking for demonstrable experience in Cyber Security, with a passion for the field.
• We need experience reviewing and performing risk assessments, developing risk treatment plans, and communicating risks to others.
• We need the ability to identify typical risk indicators and explain prevention measures.
• We need experience adopting a structured approach to executing and documenting audits, following agreed standards.
• We need experience maintaining the integrity of records to support and satisfy audit trails.
• We need the ability to champion cyber security risk and ensure the ongoing appropriateness of practices.
• We need the ability to communicate technical requirements effectively to both technical and non-technical stakeholders.

Responsibilities

• We plan and implement organisation-wide processes and procedures for the management of risk.
• We monitor the efficiency and effectiveness of risk management processes across the organisation and make recommendations for continuous improvement.
• We develop risk management-related policy and assure its ongoing appropriateness in line with regulation and wider organisational and government policies.
• We support the embedding of risk management systems, processes, and frameworks across the business and communicate these to a range of stakeholders.
• We work within established security and risk management governance structures to support, review, and undertake risk management activities, including cyber security risk assessments, threat assessments, and other risk management activities.
• We communicate risk assessment outcomes to stakeholders in ways that support effective security, risk management, and decision-making.
• We provide advice to address straightforward cyber security risks by applying security capabilities, including published guidance or standards, and validating the effectiveness of risk mitigation measures.
• We help risk or service owners make well-informed decisions by providing clear security advice and contributing to reports or working within established reporting chains in a security team.
• We provide risk-oriented training to a range of stakeholders, including preparing training materials, so relevant stakeholders are equipped to use standard risk management frameworks.

Technologies

• Support
• Security
• MS Teams
• REST

More

Home Office Digital designs, builds, and develops services for the department and for government, supporting up to 3 million visa applications, 100 million border crossings, up to 8 million passport applications, and 140 million police checks each year. We are an expert team of cyber professionals committed to reducing the exposure of new and existing digital systems to cyber-attack. We offer a diverse and supportive organisational culture and a commitment to your continuous development. Where business needs allow, some roles may suit a combination of office and home-based working, with employees expected to spend a minimum of 60% of their working time in the office. This role is available full time, with compressed hours available, and may involve occasional travel to other locations. The role is based in London Borough of Croydon, Salford, Sheffield, or Glasgow City. We offer a Civil Service Pension, an in-year reward scheme, 25 days annual leave on appointment rising with service, 8 days of public holidays plus 1 privilege day, and a digital capability-based allowance may apply following post-interview assessment.