Technology and Cybersecurity Assurance and Risk Manager

Department for Culture, Media and Sport; City of Westminster; On-site; GBP 70,000 - 100,000; Full time

Job summary

The Department for Culture, Media and Sport (DCMS) within the DDaT directorate is inviting applications for the Technology and Cybersecurity Assurance and Risk Manager role in the Technology, Information and Cybersecurity Operations (TICO) division. You will lead the cyber risk program and ensure informed security decisions across the directorate.

In this role you will influence senior leaders, manage supplier contracts, and line-manage a small team, driving risk-based decisions to protect

Qualifications

• Lead cyber risk assessments within governance structures and advise on risk remediation.
• Independently undertake risk management activities to reduce department exposure from cyber exercises and threat intelligence.
• Oversee CAF annual assessment and GCAP-related ALB compliance to support auditable risk decisions.

Responsibilities

• Lead across four key areas to manage the department's cyber risk exposure.
• Manage contracts and relationships with suppliers to ensure service quality and risk management.
• Line manage a small team within the division.

Job description

Sitting within the departments Digital, Data and Technology (DDaT) directorate, the Technology and Cybersecurity Assurance and Risk Manager sits within the DDaTs Technology, Information and Cybersecurity Operations (TICO) division. This division is responsible for the identification, assessment, evaluation and management of risks related to cybersecurity, data protection and information management. This role, within the cybersecurity element of the division, plays a vital role in leading the delivery of the directorates cyber risk programme, ensuring risk management is central to all evidence-based security decisions in DCMS. This is an exciting time to be joining DDaT in DCMS, with the rollout of a new delivery model designed to enable the department's ability to support its sectors. As a cyber risk professional, you will have an unparalleled opportunity to apply your skills, shape the way in which DCMS manages its cybersecurity risks and gain significant exposure to senior decision-makers. What's more, your work will make a real difference in protecting both UK citizens and society as a whole, through the use of your skills to protect vital services. In this role, you will lead across four key areas to manage the department's cyber risk exposure:

• Operational Risk Assessment: Lead the analysis of business-supporting security needs and undertake cyber risk assessments within established governance structures. You will provide advice to stakeholders on remedying risks by proportionately applying security capabilities and drawing on expert guidance.
• Enterprise Risk Management: Independently undertake risk management activities to reduce departmental exposure identified through cyber exercises, threat intelligence, and SME engagement, ensuring advice is consistent with professional standards and personal expertise.
• GovAssure Compliance: Lead the annual assessment of departmental compliance with the Cyber Assessment Framework (CAF), reporting on cyber maturity to senior leaders.
• Arms-Length Body (ALB) Compliance: In response to the Government Cyber Action Plan (GCAP), monitor ALB compliance with mandated security requirements to enable the Accounting Officer to make informed, auditable, and risk-based decisions.

You will manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management. You will have line management responsibilities for a small team.