Senior Cyber Security Risk Manager

Government Recruitment Service; Glasgow; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A government department in the UK is seeking a Senior Cyber Security Risk Manager to identify and mitigate cyber-related risks. This role involves conducting risk assessments, developing cyber security policies, and collaborating with stakeholders to ensure compliance with security standards. The ideal candidate will have experience in risk management and the ability to communicate findings clearly. The position may allow for hybrid work arrangements, requiring at least 60% office presence.

Qualifications

• Proven experience in risk management activities such as risk assessments and audits.
• Ability to communicate risk assessment outcomes to stakeholders.
• Experience in developing and maintaining cyber security policies.

Responsibilities

• Support and conduct risk management activities including supplier risk assessments.
• Develop and maintain cyber security policies and standards.
• Build relationships with departments and stakeholders to embed cyber security.

Skills

Risk management

Cyber security policies

Stakeholder communication

Audit experience

Job description

Home Office Cyber Security at the Home Office plays a vital role in protecting one of the UK’s largest government departments and its nationally critical digital infrastructure.

As Senior Cyber Security Risk Manager, you will identify, understand and mitigate cyber‑related risks. You will help to evaluate the security risks to information and processes in our critical national Infrastructure and business‑critical systems. You will use your expertise and draw on a range of evidence to provide advice to stakeholders across the organisation to ensure well‑informed risk‑based decision making. You will also be responsible for conducting external audits against Home Office suppliers and internally against other business areas.

Where business needs allow some roles may be suitable for a combination of office and home‑based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office. There may be a requirement for occasional travel to other locations.

Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.

The Senior Cyber Security Risk Manager plans and implements organisation‑wide processes and procedures for the management of risk. They monitor the efficiency and effectiveness of the risk management processes across the organisation and make recommendations for continuous improvement.

As a Senior Cyber Security Risk Manager, your main day to day responsibilities will be:

• Working within established security and risk governance frameworks, supporting and conducting risk management activities such as system and supplier risk assessments, reviewing security schedules, and performing supply chain audits. Communicating risk assessment outcomes clearly to stakeholders to enable effective decision‑making.
• Contributing to the development and maintenance of cyber security policies, standards, and processes, ensuring alignment with regulations and organisational requirements. Providing advice on cyber security risks by applying recognised guidance and validating mitigation measures. Assisting risk and service owners in making informed decisions through clear security advice and reporting.
• Building functional relationships across departments, government bodies, and third‑party stakeholders. Collaborating with commercial teams to embed cyber security requirements throughout the procurement lifecycle.
• Supporting GovAssure compliance by aligning risk management processes with the Cyber Assessment Framework (CAF) and government assurance standards. Coordinating and contributing to GovAssure assessments, including evidence collection, gap analysis, and remediation planning to maintain compliance with mandated security requirements.