Senior Security Risk Assurance Manager

Department for Work and Pensions (DWP); Sheffield; On-site; GBP 50,000 - 70,000; Full time

Job summary

A large government department in the UK is seeking Security Risk and Assurance Managers to assess and manage information security risks. You will provide expert insight to senior leaders and contribute to the secure delivery of public services. Ideal candidates will have strong analytical skills, experience in risk management, and the ability to communicate effectively with stakeholders, enhancing resilience across vital services.

Benefits

Disability Confident employer policy

Opportunities for continuous professional development

Qualifications

• Experience in security risk assessment and assurance.
• Ability to communicate complex findings to non-expert audiences.
• Proven track record in stakeholder engagement.

Responsibilities

• Conduct security risk assessment and assurance activities.
• Support development of risk treatment plans.
• Build relationships with internal and external stakeholders.

Skills

Analytical skills

Stakeholder engagement

Security assessment

Risk management

Communication skills

Job description

Are you interested in helping protect vital public services and supporting national resilience? We're looking for Security Risk and Assurance Managers to join the Department for Work and Pensions (DWP) - one of the UK's largest government departments. In this analytical role, you'll help assess and manage information security risks and assurance, supporting the safe and secure delivery of services to millions of people. The DWP is responsible for welfare, pensions, and child maintenance. We deliver a range of critical services to approximately 20 million customers. In this role, you'll deliver impartial, expert security insight to senior leaders and stakeholders, ensuring that strategic security risks are identified, analysed, assured and effectively managed. This is your opportunity to make a real impact, embed evidence based assurance, and strengthen resilience across vital public services. You will join Enterprise Security & Risk Management (ESRM) in DWP's Security & Data Protection (S&D) directorate, one of the largest security teams in government. We are responsible for delivering a wide range of specialist security services, solutions and capability to DWP's 80,000 staff, Arms' Length and Public Bodies, and industry partners to safeguard the secure and resilient delivery of welfare services. Your work will contribute to the department's ability to understand and respond to security threats. This is a great opportunity to develop your skills in a high-impact area, working with colleagues across commercial, digital, and operational teams. We're a huge organisation, which means a real variety of work, challenge and opportunity. We strongly believe that diversity and inclusion help the organisation thrive and succeed. We know that diverse teams bring a wide range of perspectives, experiences and ideas, which lead to better decision-making, creativity and innovation. We have a culture where differences are celebrated and our people feel supported, included and empowered. Join us and be part of an organisation at the leading edge of government security that truly makes a real and positive impact.

Responsibilities

• Undertake evidence based security risk assessment and assurance activities across suppliers and internal services to support and deliver effective security risk and assurance capabilities
• Support the development of risk treatment plans, track their implementation and monitor mitigation effectiveness
• Apply structured analytical techniques to assess threats, vulnerabilities and impacts, providing holistic and robust opinion on the security posture of people, processes, and technology
• Contribute to the development, assessment and updating of enterprise-level security risks

Pre- Contract Assurance

• Assist in the development of security requirements for contracts and procurement processes
• Support the analysis of supplier security posture using available data and intelligence
• Identify opportunities for enhanced assurance whilst conducting timely pre-contract security assurance reviews of suppliers to DWP to inform contract award, risk mitigation and in-contract security risk management requirements

Stakeholder Engagement

• Build effective working relationships with internal and external stakeholders
• Communicate risk and assurance findings clearly and succinctly to non-expert audiences, including at senior governance levels
• Support the promotion of a risk-aware culture across DWP and its partners
• Aid development of services to ensure we continue to meet end user needs, stakeholder requirements and align to wider departmental risk and control assessment practices

Team Contribution and Development

• Contribute to team objectives and continuous improvement of ESRM services
• Share knowledge and support the development of junior colleagues
• Participate in cross-government communities of practice where appropriate

Disability Confident

A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the role as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to .