Cyber Assurance Lead (GovAssure Operations)

Overview

The Government Digital Service (GDS) is the digital centre for Government, where we are collectively responsible for setting, leading and delivering the vision for a modern digital Government. As the Cyber Directorate, our mission is to protect public services and the wider Government from cyber threats and to set the strategic direction for Government and the public sector on cyber security.

Working arrangements

We recognise that our staff have responsibilities and priorities outside of work so our approach is to work smart so flexible working arrangements are available and we actively promote hybrid working including a combination of time spent in the office with colleagues and days at home where appropriate. We are proud of how our culture embraces a diverse workforce: we come from all walks of life and bring our different backgrounds, cultures, genders, experiences and skills to collaborate as a collective team to deliver more effectively. We strive for a collegiate and inclusive culture which enables voices at all levels to be heard – everyone plays their part in helping the Government keep the UK secure. We are committed to being an equal opportunities employer, welcoming and valuing diversity. We commit to supporting and developing our staff to reach their full potential and maximise their contributions. We do not tolerate harassment or discrimination on the grounds of sex, marital status, race, colour, nationality, ethnic origin, disability, age, religion or sexual orientation.

Transfer to DSIT

In June 2025, it was announced that the Government Cyber Directorate will move from the Cabinet Office to the Department for Science, Innovation and Technology (DSIT) as a part of a machinery of government change. This change aims to bring together the digital transformation of public services into one central department, presenting exciting opportunities and positioning DSIT to lead the government’s digital agenda.

This role is in scope to formally transfer to DSIT when the machinery of government change takes place. If your start date is on the transfer date, when this is confirmed, you will be appointed direct to DSIT and your appointment will be unaffected by the machinery of government change. We are currently consulting with our Trade Unions on which policies, terms and conditions will apply on transfer. The statement of changes applied to all other Cabinet Office staff will also apply to you if you are successful.

Role

As Cyber Assurance Lead (GovAssure Operations), you’ll directly contribute to delivering the Government Cyber Security Strategy through the operational delivery of ‘GovAssure’, the cyber assurance scheme for government. You will oversee the operational running of GovAssure each year, guiding a team of Cyber Assurance Advisors to support government organisations through the GovAssure process. You will be responsible for ensuring that government organisations submit their GovAssure returns to GDS on time and to the desired level of quality.

You will work closely with the Cyber Assurance Continuous Improvement Lead to implement their recommended changes to the GovAssure scheme. This will include collaborating on a continuous assurance roadmap designed to embed assurance into the day to day business of government organisations.

You will engage regularly with stakeholders across the government security and DDAT communities to represent the GovAssure scheme, as well as liaising with the National Cyber Security Centre (NCSC) and Cyber GSeC to share lessons learned.

Your core responsibilities will be to:

• Lead the GovAssure Operations Team responsible for supporting government organisations through the end-to-end GovAssure process, providing quality assurance and approvals for technical documentation;
• Scope work packages with delivery partners and other government departments who support GDS with the operational running of GovAssure;
• Formalise the service wrap for GovAssure, working closely with wider GDS service teams to embed lines of support;
• Report on GovAssure progress to the Head of Cyber Assurance and the Programme Management Office (PMO), escalating risks and issues when required;
• Work closely with the Cyber Assurance Continuous Improvement Team to embed new solutions and ways of working into the GovAssure scheme;
• Grow and support a dynamic, inclusive and dedicated team, building technical skills and providing opportunities to excel and develop.

The above list of job duties is not exclusive or exhaustive and the post holder will be required to undertake such tasks as may reasonably be expected within the scope and grading of the post.