Lead Cyber Security Risk Manager - Secure by Design in Salford

Location: London Borough of Croydon; Salford; Sheffield; GlasgowSalary: 62,732 - 73,406 per yearEmployment: Full timeCategory: Security GuardPosted: Valid to: Employer: Home OfficeJob summaryHome Office Digital designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.As a Lead Cyber Security Risk Manager in the Secure by Design team, you will identify, understand and mitigate cyber-related risks. You will evaluate the risks to our critical national infrastructure and business critical systems and use your expertise to draw on a range of evidence to proactively advise stakeholders, enabling well-informed, risk-based decision making.You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development. Where business needs allow, some roles may be suitable for a combination of office and home-based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office. Applicants can raise any queries to the email address at the bottom of the advert. Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.Job descriptionThe Lead Cyber Security Risk Manager supports, plans and develops the implementation and management of organisation-wide processes and procedures for the management, assurance or governance of cyber risk. They will provide tailored expert support and advice that highlights cyber security risks to a range of stakeholders, projects, business teams and service owners, helping them to remedy identified risks by enabling well-informed and auditable decisions, using published guidance and standards, and drawing on a range of experts as well as personal expertise.As the Lead Cyber Security Risk Manager working within the Secure by Design team, your main day to day responsibilities will be:Independently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs and conduct tailored threat assessments, security audits, or other risk management activities, ensuring consistency with regulations and legislation. Developing risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies.Promote the adoption of Secure by Design principles, standards and best practices across business and technology teams, influencing all stakeholders to make risk-informed decisions that enhance cyber security outcomes while enabling delivery objectives.Managing risk management processes, reviewing their efficiency and effectiveness, and leading recommendations for continuous improvement. This includes reviewing internal controls following any security breach, providing advice on how to remediate any vulnerabilities discovered, and agreeing and overseeing remedial solutions, controls and safeguards.Assessing reviews and risk assessments and ensuring identified risks are managed in accordance with Home Office risk management policies. Working PatternDue to the business requirements of this role, it is only available on a full-time basis. However, compressed hours are available. Person specificationEssential SkillsYou’ll have a demonstrable passion for Cyber Security with the following skills or experience in:Information or cyber security including threat and risk analysis for complex, high-risk and/or mission critical systems, preferably involving the Home Office, Cabinet Office, NCSC or within industry Security Operations Centres (SOCs) and departments.Proven ability to lead and mentor a diverse team of governance, risk or assurance specialists. Proficiency analysing or implementing technical or security policies in a large organisation. Skilled in balancing security requirements with business impact to ensure practicality and effectiveness. Ability to champion cybersecurity risk and ensure ongoing appropriateness or practices.Demonstrable experience embedding Secure by Design principles into programmes, products, services or technology solutions, ensuring that security requirements, threat modelling, risk assessment and appropriate controls are considered and implemented throughout the delivery lifecycle.The ability to drive cultural and operational change through awareness campaigns, leadership engagement, upskilling initiatives and influencing, persuading and building consensus across diverse stakeholder groups.SFIA capability frameworkSkills for the Information Age (SFIA) version 8 is the technical framework that sets the standard capability and development of all levels in the Home Office. This is a link to the capability framework: All skills A - Z English (sfia-online.org). We use set SFIA technical skills to form our interview questions and we will assess you against these technical skills during the selection process. The essential skills listed above are reflective of the Home Office Government Digital and Data Profession Career Framework (based on the industry standard SFIA framework). Use the SFIA Levels of responsibility to understand what would be expected for each technical skills listed below. Strategy and architecture: Security and PrivacyInformation Assurance (INAS) – Level 3Information security (SCTY) – Level 4Governance, Risk and Compliance Risk management (BURM) – Level 3Audit (AUDT) – Level 4Advice and Guidance Specialist advice (TECH) – Level 4Relationships and EngagementStakeholder ManagementStakeholder relationship management (RLMT) – Level 4Technical skillsWe'll assess you against these technical skills during the selection process:Information Assurance (INAS) – Level 3Information security (SCTY) – Level 4Risk management (BURM) – Level 3Audit (AUDT) – Level 4Specialist advice (TECH) – Level 4Stakeholder relationship management (RLMT) – Level 4BenefitsAlongside your salary of 62,732, Home Office contributes 18,173 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).Why work for us...Find out more information at: Benefits - Home Office Careers, but some of the primary ones are: A Civil Service Pension with employer contribution rates of at least 28.97%. In-year reward scheme for one-off or sustained exceptional personal or team achievements. 25 days annual leave on appointment, rising with service. 8 days of public holidays, plus 1 additional privilege day. Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office. Sign-up on our website to receive emails with information about careers at the Home Office. Things you need to knowArtificial intelligenceArtificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.Selection process detailsThis vacancy is using Success Profiles (opens in a new window), and will assess your Experience and Technical skills.As part of the application process, you will be asked to complete a CV and 1000-word personal statement: CV – include a brief employment history outlining for each role, the organisation, job title, dates in post, and key responsibilities and achievements. Any recent employment gaps should be explained. A second section should set out the skills and experience most relevant to this role, drawing on your career, training, and other relevant activities without repeating the employment history. Focus on the evidence that best demonstrates your capability to meet the role requirements. Personal statement - this should present a clear and coherent narrative explaining why you are applying, what you would bring to the role, and how your experience meets the essential criteria. Use well‑chosen examples to illustrate your impact, drawing on STAR‑style thinking where helpful, but ensure the statement reads as a single, flowing document rather than a set of isolated responses. To ensure you are assessed on merit alone, we ask you to anonymise your application. This means removing personal identifiers such as your name, age, and place of education. You do not need to remove your employment history, job titles, or any information about your work. Watch our three short videos on how to apply for our roles: Applying - Home Office Careers.Problems during the application processIf you experience problems accessing this advert, or you think you’ve made a mistake on an initial application, please contact , including the vacancy reference, at least two working days before the vacancy closes. Further information can be found on our website. Do not create or attempt to submit another application, online test or use a different Civil Service Jobs