Senior Security & Fraud Risk Advisor – Public Services

Manchester Digital; Manchester; Hybrid; GBP 49,000 - 67,000; Full time

Benefits offered by this job

Hybrid working

Flexible hours

Great worklife balance

Job summary

DWP Digital in the United Kingdom is seeking an experienced Security and Fraud Risk Manager to shape public services that are secure by design, resilient to fraud and trusted by users. This senior advisory role will guide decision-making across Universal Credit and Working Age Services, identifying risks, advising on controls, and working with delivery teams to balance security with service delivery.

Candidates should hold CISSP, CISM, GRCP or an equivalent security qualification and be able to

Qualifications

• Experience in security and fraud risk strategies and threat assessment.
• Knowledge of risk management lifecycle and controls.
• Understanding of Nexus, Non-Repudiation and PACE concepts.
• Ability to influence senior stakeholders and translate needs into security solutions.
• Experience with Agile delivery teams and digital services.

Responsibilities

• Advise on fraud, error and security risk across Universal Credit and related services.
• Identify risks, assess vulnerabilities and recommend practical mitigations.
• Guide service design and delivery to balance security with user-centric service.
• Engage with senior stakeholders to influence decisions and policy.
• Support delivery teams with secure-by-design approaches and threat responses.

Skills

Security risk management

Fraud risk assessment

Stakeholder engagement

Agile delivery

Threat intelligence

Education

CISSP

CISM

GRCP

Equivalent security qualification

Job description

DWP Digital in the United Kingdom is seeking an experienced Security and Fraud Risk Manager to shape public services that are secure by design, resilient to fraud and trusted by users. This senior advisory role will guide decision-making across Universal Credit and Working Age Services, identifying risks, advising on controls, and working with delivery teams to balance security with service delivery.

Candidates should hold CISSP, CISM, GRCP or an equivalent security qualification and be able to