Description
The Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) is the senior accountable owner for the Home Office cyber governance, risk and compliance (GRC) function, cyber strategy, cyber security professional practice, and cyber business management function.
The postholder provides enterprise-wide leadership and second-line assurance over cyber risk management, policy, standards and reporting, ensuring cyber risk is understood, owned and managed proportionately across the organisation.
The role has leadership responsibility for the heads of governance, risk, compliance, business management, strategy and professional practice functions, ensuring the delivery of an integrated, high-performing capability that supports Home Office cyber security objectives.
The role leads capability planning, recruitment, career pathways and deployment of cyber professionals across Product Family Groups and Platforms, so the right skills and capacity are aligned to service criticality, delivery priorities and the threat landscape.
Main Responsibilities:
- Owning and evolving the cyber security GRC and cyber practice strategy, ensuring alignment with Home Office priorities, Digital First Transformation Programme and cross government policy.
- Providing strategic leadership of second line cyber risk and assurance, including setting assurance priorities, aggregating and analysing enterprise cyber risk, and reporting clear, actionable insights to senior leadership and governance forums.
- Setting, maintaining and assuring enterprise cyber security policies, standards, frameworks and reusable patterns, ensuring they are proportionate, risk based and consistently applied across Product Family Groups and Platforms.
- Owning the cyber reporting framework, including defining metrics, dashboards and management information to support effective oversight of cyber risk, maturity and performance.
- Leading the cyber security professional practice, including capability and workforce planning, recruitment, standards, career pathways, professional assurance and succession planning.
- Building and sustaining strong, trusted relationships with senior business, digital, technology and security leaders across the Home Office and wider government.
Person Specification:
- Demonstrable passion for cyber security, with proven experience operating at enterprise scale, and the ability to lead complex governance, risk and professional practice functions.
- Experience in providing senior leadership for a large cyber security function, setting clear vision, strategy and operating models aligned to organisational priorities and government policy.
- Influencing senior leaders and decisionmakers across business, digital, technology and security functions to embed effective cyber governance and risk ownership.
- Providing authoritative advice, assurance and constructive challenge on cyber security matters at executive and board level.
Benefits:
- Salary of £90,000 - £105,000 per year
- Employer contribution of £26,073 towards Civil Service Defined Benefit Pension scheme
- Learning and development tailored to your role
- Flexible working options
- Culture encouraging inclusion and diversity
- Civil Service pension with an employer contribution of 28.97%