Senior Cyber Security Risk Manager – Secure by Design

Overview

In this role you drive Secure by Design across Home Office Digital, embedding a security-first culture. You’ll partner with project teams to ensure security is built in from the start and integrated into governance and gate reviews. You’ll promote standardised Secure by Design practices across portfolios and use templates and checklists to maintain consistency. You’ll lead risk visibility and escalation to harden critical digital services for visa, border, and policing systems. This is a mission-driven opportunity to shape a resilient cyber security culture at scale.

Pay / Benefits

• Civil Service Pension with employer contribution
• 25 days annual leave + 8 public holidays + 1 privilege day
• Non-contractual capability-based allowance
• Flexible office/home-based working (60% in office)
• Interest in reward schemes for exceptional performance

Responsibilities

• Embed Secure by Design into digital delivery and governance structures
• Support and review risk management activities within established governance
• Educate delivery and security teams using the Secure by Design toolkit
• Encourage participation in government Secure by Design webinars and share learnings
• Integrate Secure by Design into onboarding and knowledge hubs
• Action feedback from projects and spend control processes
• Stay up-to-date with the latest Secure by Design developments

Key requirements

• Overseeing risk reviews and developing risk treatment plans
• Planning and delivering project-level activities
• Auditing with a structured approach and maintaining audit trails
• Executive stakeholder engagement and communications
• Understanding and applying Secure by Design principles (Desirable: UK Government policy)

• Communication and influencing
• Seeing the big picture
• Stakeholder management
• Information Assurance (INAS) – Level 3
• Information security (SCTY) – Level 3
• Risk management (BURM) – Level 3

…