Senior Cyber Security Risk Manager - Secure by Design in Kennington

Location: London Borough of Croydon; Salford; Sheffield; GlasgowSalary: 49,850
Candidates should take the time to read all the elements of this job advert carefully Please make your application promptly.
- 52,850 per yearEmployment: Full timeCategory: ITPosted: Valid to: Employer: Home OfficeJob summaryHome Office Digital designs, builds, and maintains all IT services for the department as well as a number of its Arms Length Bodies, wider government organisations and for the public.
Every year Home Office systems support up to three million visa applications, checks on 100 million border crossings, up to eight million passport applications and deliver 140 million police checks on people, vehicles, and property.As a Senior Cyber Security Risk Manager within Home Office Cyber Security, you will play a key role in embedding Secure by Design across our organisation, driving the cultural change needed to create a strong and positive security culture.
You will work with project teams to ensure cyber security is considered from the outset and recognised as a shared responsibility throughout the delivery lifecycle.You will ensure Secure by Design activities are part of the organisation’s government gate review life cycle so that security risks are addressed early and escalated in the right way.
You will help escalate projects with low security confidence for extra support or oversight.
You will also promote a standardised approach to Secure by Design activities across project, programmes and portfolios.
Additionally you will encourage the use of templates, tools, and checklists (like the Secure by Design self assessment tracker) to help teams apply Secure by Design principles consistently.You will join an expert team of cyber professionals, committed to reducing exposure to cyber-attack of new and existing digital systems.
You will be aided by a diverse and supportive organisational culture, and a commitment to further your continuous development.Where business needs allow, some roles may be suitable for a combination of office and home-based working.
Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office.
Applicants can raise any queries to the email address at the bottom of the advert.
Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.Job descriptionThe Senior Cyber Security Risk Manager within Secure by Design plans and implements organisation-wide processes and procedures for the embedding of Secure by Design as a framework approach to increasing the organisations Cyber Security.
They monitor the uptake, adoption and effectiveness of utilising the Secure by design principles and activities across the organisation and make recommendations for continuous improvement.As a Senior Cyber Security Risk Manager you will:Ensure Secure by Design activities are part of your organisation’s government gate review life cycle so that security risks are addressed early and escalated in the right way.Help escalate projects with low security confidence for extra support or oversight.Promote a standardised approach to Secure by Design activities across project,programmes and portfolios.Encourage the use of templates, tools, and checklists (like the Secure by Design self assessment tracker) to help teams apply Secure by Design principles consistently.Person specificationMain ResponsibilitiesAs a Senior Cyber Security Risk Manager your main day to day responsibilities will be:Explaining how you have incorporated Secure by Design into digital delivery within your own organisation.
Include governance processes and the role each team plays in delivering Secure by Design activities.Working within established security and risk management governance structures in support of Secure by Design, usually under supervision to support, review and undertake straightforward risk management activities.Keeping awareness high by regularly using the Secure by Design communications toolkit to educate delivery, security, and supporting teams on their roles and the benefits of adopting Secure by Design practices.Attending government Secure by Design webinars and encourage your teams to join, sharing key takeaways across your organisation to reinforce shared learning and continuous improvement.Embedding Secure by Design into your onboarding process to help new staff understand its importance from day one.
Consider adding guidance to your organisation’s intranet or knowledge hub as a permanent reference.Reviewing and actioning feedback from projects and the spend control process.Liaising with colleagues to update your internal processes and guidance based on what’s working well and where challenges have emerged.Staying up to date with the latest Secure by Design developments.Working PatternDue to the business requirements of this role, it is only available on a full-time basis.
However, compressed hours are available.Essential criteriaYou’ll have a demonstrable passion for Cyber Security with the following skills or experience in:Overseeing risk reviews, developing risk treatment plans and communicating those risks to others.Planning and delivery of project level activities.Adopting a structured approach to executing and documenting audits, following agreed standards.Maintaining integrity of records to support and satisfy audit trails.Communications and executive stakeholder engagement and management.Desirable criteriaA strong understanding of the UK Government's Secure by Design policy and principles, with the ability to apply them effectively to support the delivery of secure Cyber Security solutions and services.SFIA capability frameworkSkills for the Information Age (SFIA) version 8 is the technical framework that sets the standard capability and development of all levels in the Home Office.
This is a link to the capability framework: All skills A
- Z English ( ).
We use set SFIA technical skills to form our interview questions and we will assess you against these technical skills during the selection process.
The essential skills listed above are reflective of the Home Office Government Digital and Data Profession Career Framework (based on the industry standard SFIA framework).
Use the SFIA Levels of responsibility to understand what would be expected for each technical skills listed below.
Strategy and architecture:Security and Privacy Information Assurance (INAS) – Level 3Information security (SCTY) – Level 3Governance, Risk and Compliance Risk management (BURM) – Level 3Audit (AUDT) – Level 3Advice and Guidance Specialist advice (TECH) – Level 3 (Generic Level 3 descriptor)Relationships and EngagementStakeholder Management Stakeholder relationship management (RLMT) – Level 3 (Generic Level 3 descriptor)BehavioursWe'll assess you against these behaviours during the selection process:Communicating and InfluencingSeeing the Big PictureTechnical skillsWe'll assess you against these technical skills during the selection process:Information Assurance (INAS) – Level 3Information security (SCTY) – Level 3Risk management (BURM)
- Level 3BenefitsAlongside your salary of 49,850, Home Office contributes 14,441 towards you being a member of the Civil Service Defined Benefit Pension scheme.
Find out what benefits a Civil Service Pension provides (opens in a new window).Why work for us...Find out more information at: Benefits
- Home Office Careers, but some of the primary ones are: A Civil Service Pension with employer contribution rates of at least 28.97%.
In-year reward scheme for one-off or sustained exceptional personal or team achievements.
25 days annual leave on appointment, rising with service.
8 days of public holidays, plus 1 additional privilege day.
Where business needs allow, some roles may be suitable for a combination of office and home-based working.
This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.
Sign-up on our website to receive emails with information about careers at the Home Office.
Things you need to knowArtificial intelligenceArtificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience.
Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action.
Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.Selection process detailsThis vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.As part of the application process, you will be asked to complete a CV and a 1000-word personal statement:CV – include a brief employment history outlining for each role, the organisation, job title, dates in post, and key responsibilities and achievements.
Any recent employment gaps should be explained.
A second section should set out the skills and experience most relevant to this role, drawing on your career, training, and other relevant activities without repeating the employment history.
Focus on the evidence that best demonstrates your capability to meet the role requirements.
Personal statement
- this should present a clear and coherent narrative explaining why you are applying, what you would bring to the role, and how your experience meets the essential criteria.
Use well‑chosen examples to illustrate your impact, drawing on STAR‑style thinking where helpful, but ensure the statement reads as a single, flowing document rather than a set of isolated responses.
To ensure you are assessed on merit alone, we ask you to anonymise your application.
This means removing personal identifiers such as your name, age, and place of education.
You do not need to remove your employment history, job titles, or any information about your work.
Watch our three short videos on how to apply for our roles: Applying
- Home Office Careers.Problems during the application processIf you experience problems accessing this advert, or you think you’ve made a mistake on an initial application, please contact , including the vacancy reference, at least two working days before the vacancy closes.
Further information can be found on our website.
Do not create or attempt to submit another application, online test or use a different Civil Service Jobs