Senior Cyber Security Risk Manager|Flexible Work & Pension

Driver and Vehicle Standards Agency; Swansea; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Employer pension contribution

25 days annual leave + bank holidays

Flexible working options

Job summary

Driver and Vehicle Standards Agency seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cyber risks across the agency's digital infrastructure, developing risk management strategies and ensuring compliance with government security standards.

You will collaborate with departments, provide risk-based guidance to owners, and lead incident response under the Head of Cyber Assurance, contributing to protecting sensitive data and ongoing operations.

Qualifications

• Deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management.
• Ability to communicate with both technical and non-technical stakeholders.
• Experience leading cyber risk management in a large organisation.

Responsibilities

• Identify, understand and mitigate cyber risks; advise risk owners for risk-based decisions.
• Lead cyber risk assessments, threat assessments and related risk management activities.
• Provide tailored guidance to remediating identified risks using published standards and guidance.
• Ensure compliance with Security Policy Framework, NCSC CAF/NIST and related governance models.
• Lead incident response as directed by Head of Cyber Assurance; coordinate with Security Operations.

Skills

Cybersecurity frameworks

Risk assessment

Threat management

Stakeholder communication

Job description

Driver and Vehicle Standards Agency seeks a Lead Cyber Security Risk Manager to identify, assess and mitigate cyber risks across the agency's digital infrastructure, developing risk management strategies and ensuring compliance with government security standards.

You will collaborate with departments, provide risk-based guidance to owners, and lead incident response under the Head of Cyber Assurance, contributing to protecting sensitive data and ongoing operations.