Group Cyber Security Assurance Principal

Are you passionate about strengthening cyber resilience across multiple organisations? Can you provide expert assurance that helps organisations understand, manage and reduce cyber risk? Do you have the expertise and drive to influence security strategy and embed assurance activities across the DfT Group? If so, we'd love to hear from you!

This is an exciting time to join the Digital, Information and Security Directorate within the Department for Transport as we restructure our directorate to ensure we are ready for future challenges, building a more sustainable, skilled and in-house capability.

Assess risk. Strengthen resilience. Drive assurance. Use your cyber security expertise to influence decision-making, strengthen assurance and help protect critical services, systems and information across the Department for Transport Group.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary.
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King's birthday.
• Flexible working options where we encourage a great work-life balance.

As a Group Cyber Security Assurance Principal, you'll play a leading role in strengthening cyber resilience across the Department for Transport Group. You'll provide expert assurance, oversight and guidance to help ensure security controls are effective, risks are managed appropriately and government security requirements are consistently applied.

Your responsibilities will include, but aren't limited to:

• Overseeing the delivery of the Government Cyber Action Plan (GCAP) across the group.
• Developing and implementing the cyber security assurance framework across the group.
• Leading cyber security related risk assessments and other expert risk management activities, and enhance cyber security governance arrangements.
• Leading the assurance of secure by design principles across the DfT Group.
• Reviewing and reporting on the Groups compliance with NCSC's Cyber Assessment Framework and monitor the progress of action plans to improve compliance.
• Contributing to incident management policies, incident response plans, and tests.

To be successful in this role you will need to have the following experience:

• Experience of implementing cyber security policies, standards, and assurance frameworks in a large, complex organisation to improve compliance.
• Strong knowledge of security threats, risk management, and mitigation strategies.
• Experience of incident response and crisis management.
• Knowledge of protective security, ISO 27001/2, NCSC's Cyber Assessment Framework and Government Functional Standard GovS007: Security.
• Experience delivering quality service in high-pressure environments.
• Professional qualifications or willingness to work towards industry-recognised qualifications in information risk and ISO 27001 (e.g. Management of Risk Practitioner, Certified ISO 27001 Practitioner and/or CISSP).

The role is part of the Government Security Profession Career Framework and utilises an enhanced Capability Based Pay Framework which provides access to a Digital and Data allowance. The base pay is 62,034. In addition to this the role includes a Digital and Data allowance of up to 20,396.

Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 32 hours per week. Occasional travel to other offices will be required, which may involve overnight stays. This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

Successful candidates must undergo a basic (or equivalent) criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting.

This job is broadly open to UK nationals, nationals of the Republic of Ireland, nationals of Commonwealth countries who have the right to work in the UK, and nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.