Description
The Technology and Cybersecurity Assurance and Risk Manager role sits within the Digital, Data and Technology (DDaT) directorate, specifically in the Technology, Information and Cybersecurity Operations (TICO) division.
This role leads the delivery of the directorate's cyber risk programme, ensuring risk management is central to all evidence-based security decisions in DCMS.
Key areas of responsibility include:
- Operational Risk Assessment: Leading analysis of business-supporting security needs and undertaking cyber risk assessments.
- Enterprise Risk Management: Independently undertaking risk management activities to reduce departmental exposure.
- GovAssure Compliance: Leading the annual assessment of departmental compliance with the Cyber Assessment Framework (CAF).
- Arms-Length Body (ALB) Compliance: Monitoring ALB compliance with mandated security requirements.
The ideal candidate will have technical skills aligned to the cyber security governance & risk management skills in the Government Security Profession, including:
- Conducting assessments for enterprise systems and reporting on security characteristics.
- Deriving security requirements through threat analysis.
- Developing and applying new concepts in protective security.
- Proactively leveraging diverse intelligence sources to interpret the strategic threat environment.
- Experience of communicating complex technical matters to non-technical audiences.
Desirable skills include previous experience evaluating cyber risk within government organisations or the private sector, and experience of successful leadership within a cyber security or intelligence environment.
The salary for this role is GBP 56,582 - 69,740 per year.
Benefits include a Civil Service pension with an employer contribution of 28.97%, flexible working arrangements, 26.5 days annual leave on entry, and access to the Edenred employee benefits system.