Cyber Risk Adviser (Assurance)

The Government Cyber Unit (GCU)'s mission is to protect public services from cyber threats and digital resilience failures.

You will directly contribute to the delivery of the Government Cyber Action Plan (GCAP) which aims to reduce cyber and digital resilience risks across government and the wider public sector.

Your role will be within the Assurance Team, which works closely with organisations participating in GovAssure, the assurance scheme for critical systems in government.

Key Responsibilities:

• Act as the main point of contact for a portfolio of government organisations, building trusted relationships and supporting them through the GovAssure process.
• Provide subject expertise in cyber assurance, advising security teams across government on the GovAssure process and supporting them to scope their critical systems and apply a proportionate, risk-based approach at each stage.
• Quality assure documents and evidence organisations submit, drawing on technical expertise where needed.
• Follow up with organisations to keep progress on track, and identify and escalate risks or issues that could affect delivery.
• Keep accurate, high-quality records of engagement, decisions and risks, giving government a clear and reliable picture of its cyber resilience across departments and supporting informed reporting and programme decisions.
• Lead projects and contribute ideas to improve and expand cross-government cyber assurance, working closely with the Continuous Improvement and Data teams.

Person Specification:

• Proven ability to build trusted relationships with technical and business stakeholders across a diverse range of organisations, regularly engaging and influencing them to achieve positive outcomes.
• Experience of working in national security, government cyber security or critical national infrastructure (CNI) protection, or a related area of government security, and applying an understanding of the threats these areas face.
• Experience of applying risk management principles in cyber security and/or security assurance, including familiarity with the National Cyber Security Centre’s Cyber Assessment Framework (CAF).
• A strong track record of managing competing priorities and delivering high-quality outcomes to deadlines, working independently, keeping others on track, and raising risks or issues early.
• Up-to-date knowledge of cyber security measures and wider protective security concepts, with experience of applying this to help organisations understand their security needs, assess how well their systems and services are protected, and share good practice with others.

Benefits:

• Flexible hybrid working with flexi-time and the option to work part-time or condensed hours.
• A Civil Service Pension with an average employer contribution of 28.97%.
• 25 days of annual leave, increasing by a day each year up to a maximum of 30 days.
• An extra day off for the King’s birthday.
• An in-year bonus scheme to recognise high performance.
• Career progression and coaching, including a training budget for personal development.
• A focus on wellbeing with access to an employee assistance programme.
• Job satisfaction from making government services easier to use and more inclusive for people across the UK.
• Advances on pay, including for travel season tickets.
• Death in service benefits.
• Cycle to work scheme and facilities.
• Access to an employee discounts scheme.
• 10 learning days per year.
• Volunteering opportunities (5 special leave days per year).
• Access to a suite of learning activities through Civil Service learning.