{bc}
indeed

Technology and Cybersecurity Assurance and Risk Manager

Department for Culture, Media and Sport
London, GBR
Full-time
Onsite
£56,582–£69,740,
Discovered 1 weeks ago
Cyber security governance and risk managementCyber risk assessmentEnterprise risk managementThreat analysisSecurity requirements developmentCyber Assessment Framework (CAF)

Full Job Posting

Role overview

The role sits in the Technology, Information and Cybersecurity Operations division of DCMS Digital, Data and Technology.

The postholder leads the directorate's cyber risk programme and makes risk management central to evidence-based security decisions.

The division manages risks related to cybersecurity, data protection, and information management.

Cyber risk and assurance responsibilities

  • Lead operational risk assessments of business-supporting security needs within established governance structures.
  • Advise stakeholders on proportionate risk remediation using security capabilities and expert guidance.
  • Independently manage enterprise risks identified through cyber exercises, threat intelligence, and subject-matter expert engagement.
  • Lead annual assessment of departmental Cyber Assessment Framework compliance and report cyber maturity to senior leaders.
  • Monitor arms-length body compliance with mandated security requirements to support auditable, risk-based Accounting Officer decisions.
  • Manage contracts and supplier relationships, and line-manage a small team.

Essential requirements

  • Technical skills aligned to cyber security governance and risk management in the Government Security Profession.
  • Experience assessing enterprise systems and reporting security characteristics so identified risks can be treated.
  • Ability to derive security requirements through threat analysis and interpret organisational risk appetite to make actionable recommendations.
  • Ability to develop and apply protective security concepts involving corporate enablers and the UK security community.
  • Ability to use diverse intelligence sources to interpret the strategic threat environment and attack surface.
  • Experience communicating complex technical matters to non-technical audiences and managing stakeholders across organisational boundaries.

Desirable experience

  • Previous experience evaluating cyber risk in government or the private sector, and an existing professional network.
  • Successful leadership experience in a cybersecurity or intelligence environment in the public or private sector.

Salary and benefits

  • Salary is listed as £56,582–£69,740, with separate London and national ranges; no pay cadence is stated.
  • Civil Service Pension with an employer contribution of 28.97%.

Contract and working pattern

  • The role is listed as fixed term, loan, or secondment, with a two-year length of employment.
  • Working patterns include flexible working, full-time, and job share.

Locations

  • The description lists Manchester and London.

Information session

  • An information session for prospective applicants is listed for Thursday, 22 October at 11:00am.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Department for Culture, Media and Sport