Lead Cyber Security Risk Manager – Secure by Design

Company: United Kingdom Government
Apply for the Lead Cyber Security Risk Manager – Secure by Design
Location: Glasgow
Job Description:

Overview

In this role you will lead organisation-wide cyber risk management within the Secure by Design team, guiding risk-based decisions to protect critical national infrastructure and services. You will collaborate with diverse stakeholders to embed security into delivery lifecycles and drive continuous improvement in risk governance. You’ll work in a collaborative, expert team and influence across business and technology domains. This is a mission-driven opportunity to strengthen government digital services at scale.

Pay / Benefits

  • Civil Service pension with employer contributions
  • 25 days annual leave
  • 8 public holidays plus one privilege day
  • 60% office-based work possible where business needs allow
  • In-year reward scheme for exceptional achievements
  • Capabilty-based allowance (post-interview assessment) non-contractual

Responsibilities

  • Independently conduct risk management activities within a defined practice area and governance structures
  • Lead derivation and analysis of security needs, and perform threat assessments and risk-based audits
  • Develop and maintain risk-related policy aligned with regulations and government policies
  • Promote Secure by Design principles across business and technology teams
  • Manage risk management processes, review efficiency, and oversee remediation of vulnerabilities
  • Assess reviews and risk assessments to ensure risks are controlled per Home Office policies

Key requirements

  • Cyber security risk analysis for complex, high-risk systems
  • Experience leading diverse governance, risk or assurance teams
  • Policy analysis and implementation in a large organisation
  • Ability to balance security with business impact
  • Experience embedding Secure by Design into programmes or products
  • Ability to drive cultural and operational change across stakeholders
  • Leadership
  • Stakeholder management
  • Influencing and consensus-building
  • Information Assurance (INAS) – Level 3
  • Information security (SCTY) – Level 4
  • Risk management (BURM) – Level 3

…

Posted: October 24th, 2026