Technology and Cybersecurity Assurance and Risk Manager

About this role

Details

London £61,234 - £69,740, National £56,582 - £63,384 + benefits.

A Civil Service Pension with an employer contribution of 28.97%

GBP

Job grade

Loan

Secondment

Length of employment

2 years

Business area

DCMS - Digital, Data and Technology

Type of role

Administration / Corporate Support

Architecture and Data

Digital

Working pattern

Flexible working, Full-time, Job share

Number of jobs available

1

Contents

• Location
• About the job
• Benefits
• Things you need to know
• Apply and further information

About the job

Job summary

Sitting within the departments Digital, Data and Technology (DDaT) directorate, the Technology and Cybersecurity Assurance and Risk Manager sits within the DDaTs Technology, Information and Cybersecurity Operations (TICO) division. This division is responsible for the identification, assessment, evaluation and management of risks related to cybersecurity, data protection and information management.

This role, within the cybersecurity element of the division, plays a vital role in leading the delivery of the directorates cyber risk programme, ensuring risk management is central to all evidence-based security decisions in DCMS.

This is an exciting time to be joining DDaT in DCMS, with the rollout of a new delivery model designed to enable the department's ability to support its sectors. As a cyber risk professional, you will have an unparalleled opportunity to apply your skills, shape the way in which DCMS manages its cybersecurity risks and gain significant exposure to senior decision-makers. What’s more, your work will make a real difference in protecting both UK citizens and society as a whole, through the use of your skills to protect vital services.

Job description

In this role, you will lead across four key areas to manage the department’s cyber risk exposure:

• Operational Risk Assessment: Lead the analysis of business-supporting security needs and undertake cyber risk assessments within established governance structures. You will provide advice to stakeholders on remedying risks by proportionately applying security capabilities and drawing on expert guidance.
• Enterprise Risk Management: Independently undertake risk management activities to reduce departmental exposure identified through cyber exercises, threat intelligence, and SME engagement, ensuring advice is consistent with professional standards and personal expertise.
• GovAssure Compliance: Lead the annual assessment of departmental compliance with the Cyber Assessment Framework (CAF), reporting on cyber maturity to senior leaders.
• Arms-Length Body (ALB) Compliance: In response to the Government Cyber Action Plan (GCAP), monitor ALB compliance with mandated security requirements to enable the Accounting Officer to make informed, auditable, and risk-based decisions.

You will manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management. You will have line management responsibilities for a small team.

Person specification

The ideal candidate would have the following key skills and experience, please note that desirable skills will only be used in the event of tied candidates:

Essential requirements

Technical skills aligned to the cyber security governance & risk management skills in the Government Security Profession.

• Conducting assessments for enterprise systems and reporting on security characteristics to ensure all identified risks are effectively addressed through appropriate treatment.
• Deriving security requirements through threat analysis, interpreting organisational risk appetite to provide actionable recommendations.
• Developing and applying new concepts in protective security, involving corporate enablers and the UK security community.
• Proactively leveraging diverse intelligence sources to interpret the strategic threat environment and attack surface.
• Experience of communicating complex technical matters to non-technical audiences and managing relationships with stakeholders across organisational boundaries.

Desirable skills

• Previous experience evaluating cyber risk within government organisations or the private sector, and an existing professional network.
• Experience of successful leadership within a cyber security or intelligence environment in either the public or private sector.

We are running an information session where prospective applicants can find out more about the role. This will be hosted by David Booth.

• Thursday, 22nd October, 11:00am

The session will be an opportunity to hear more about the role, the team and wider directorate and the department. It will also be an opportunity for you to ask any questions.

Please register your interest by filling out this Registration form and you will be sent an invitation. Invites will only be sent after this deadline has passed.

Please note that the session will not be recorded and will not focus on the DCMS recruitment process - please direct any queries that you have on this topic (timelines, reasonable adjustments, onboarding etc) to resourcing.team@dcms.gov.uk

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Information risk assessment and risk management
• Risk understanding and mitigation

Benefits

Alongside your salary of £56,582, Department for Culture, Media and Sport contributes £16,391 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

DCMS values its staff and offers a wide range of benefits to everyone who works here. We’re committed to developing talent, and supporting colleagues to have great careers in our department. To support with that, some of the benefits we offer include:

• Flexible working arrangements and hybrid working - DCMS staff work on a flexible basis with time spent in offices, and time spent working from home
• 26.5 days annual leave on entry, increasing to 31.5 days after 5 years’ service
• A Civil Service pension with an employer contribution of 28.97%
• Access to the Edenred employee benefits system which offers discounts to popular retailers and access to various useful resources such as financial and savings advice
• 3 days of paid volunteering leave
• Up to 9 months maternity leave on full pay + generous paternity and adoption leave
• Staff reward and recognition bonuses that operate throughout the year
• Occupational sick pay
• Access to the Employee Assistance Programme which offers staff 24/7 confidential support and resources such as counselling, debt guidance and management advice
• Active and engaged staff networks to join including the LGBT+, Ethnic Diversity, Mental Health and Wellbeing and Gender Equality Networks
• Exceptional learning and development opportunities that you can explore alongside your day to day work
• Season ticket loan, cycle to work scheme and much more!

Terms and conditions at SCS grades will vary. Those applying for SCS roles should refer to the candidate information pack for more information on terms and conditions.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.