Location

You can choose from Bristol, Newcastle, Nottingham, Oldham, Leeds, Birmingham or Swansea as your home office.

About The Job

Job summary

The Lead Cyber Security Risk Manager will lead efforts to identify, assess, and mitigate cybersecurity risks within the agency’s digital infrastructure.

This role involves developing risk management strategies, ensuring compliance with government security standards, and collaborating with various departments to protect sensitive data and systems.

The ideal candidate will have deep knowledge of cybersecurity frameworks, risk assessment methodologies, and threat management, with the ability to communicate effectively with both technical and non-technical stakeholders.

The position is critical to safeguarding the agency’s mission and operations against evolving cyber threats.

If you want to find out more about this role, get tips on the application or ask the hiring manager any questions, join us for a virtual information session on 15th October at 17:30. Click here to register.

https://www.eventbrite.co.uk/e/1027888932467?aff=oddtdtcreator

Job Description

Responsibilities include but are not limited to:

The Lead Cyber Security Risk Manager identifies, understands and mitigates cyber-related risks, and provides risk or service owners with advice to help them make well informed risk-based decisions, focusing on:
Project activity to ensure compliance with information legislation and DVSA policy particularly HMG’s Security Policy Framework, and NCSC Standards.
Raising risks as necessary to respond to any non-compliance and provides direction for Information Management and Security to manage the ongoing assurance of DVSAs information assets and products, and liaising with Department for Transport Assurance Authority or equivalent, when necessary.
Lead the analysis and derivation of business-supporting security needs, undertake Cyber Security related risk assessments, conduct tailored threat assessment and other risk management activities, and ensure activities are consistent with applicable regulations and legislation.
Provide tailored advice to a range of stakeholders on how to remedy identified risks by proportionately applying security capabilities, using published guidance, standards, and drawing on a range of experts as well as personal expertise.
Responsibility for ensuring DVSA’s compliance with key principles and outcomes outlined in HMGs Security Policy Framework, NCSC CAF and or NIST, to Cyber and related governance models and supporting the reporting of these to DfT and Cabinet Office.
With responsibility for direct reports, you will demonstrate leadership by providing guidance to staff to support the delivery of objectives. Manage and engage with honesty and integrity, and upholding the reputation of the Agency, Department and Civil Service.
Leads incident response as directed by the Head of Cyber Assurance, including responding to alerts from any Security Operations Centre monitoring DVSA Systems.

For further information, please see the attached Role Profile.

Person specification

About you:

We are looking for someone who:

Someone who has a clear understanding of risk management, including the threat intelligence environment and how risk appetite influences advice provided.
A proven and adaptable communicator and listener, you will be highly skilled in the delivery and absorption of information, both verbally and in writing, with colleagues at all levels.
A background in managing diverse teams of people, motivating them to deliver challenging and sometimes conflicting objectives.
A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.

Additional Information:

This role can be based in Bristol, Swansea, Leeds, Nottingham, Newcastle, Oldham or Birmingham. Your presence at one of these locations will form part of the working arrangements agreed with you. We operate a hybrid working model giving you greater flexibility about where and when you work. Our expectation is that you will spend a minimum 60% of your time at your base location. Visits to other DVSA sites or work locations count towards this.

About Us

The Driver and Vehicle Standards Agency (DVSA) helps keep Britain moving, safely and sustainably.

We do this by helping people through a lifetime of safe and sustainable journeys, helping them keep their vehicles safe to drive, and protecting them from unsafe drivers and vehicles.

We’re working hard to:

Make roads safer.
Improve services for our customers.
Make road transport greener and healthier.
Harness the potential of technology and data.

We’re committed to giving all our colleagues purpose, professionalism and pride in what we do. We work in supportive, diverse and inclusive teams where everyone is valued. You can grow, develop and progress, and make a real difference to society.

We pride ourselves as being an employer of choice and welcome and encourage applications from everyone, such as ethnic minorities, women, disabled people and those who identify as LGBT+.

To find out more about how we champion diversity and inclusion in the workplace and making DVSA a great place to work visit our Careers website .

Behaviours

We'll assess you against these behaviours during the selection process:

Seeing the Big Picture
Delivering at Pace

Technical Skills

We'll assess you against these technical skills during the selection process:

Government Security Profession Cyber Security Risk Manager Lead - Information Risk assessment & Risk management - Skill level: Practitioner
Government Security Profession Cyber Security Risk Manager Lead - Applied Security Capability - Skill level: Practitioner
Government Security Profession Cyber Security Risk Manager Lead - Protective Security - Skill level: Practitioner
Government Security Profession Cyber Security Risk Manager Lead - Threat Understanding - Skill level: Practitioner

Benefits

An environment with flexible working options where we encourage a great work-life balance.
Alongside your salary, DVSA has a fantastic pension scheme with an average employer contribution of 28.97%.
Generous Annual Leave - 25 days holiday, increasing by 1 each year of service, up to 30.
8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
Latest IT and Tech devices.
A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues.
Excellent learning and development tailored to your role including paid apprenticeships up to Masters level.
Wide range of discounts schemes on high street names.
Employee assistance program for health and well-being.
Cycle to work scheme and Gym membership offers.

If you would like to read more about the great opportunities and benefits of working at DVSA visit our Careers Website.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

As part of the application process, you will be asked to complete a CV and Personal Statement (1000 words). Further details around what this will entail are listed on the application form.

Please structure your Personal Statement to provide detailed evidence of each of the following:

A history of effective risk management, where you have experience in the identification, understanding, and mitigation of cyber security risks.
A proven and adaptable communicator and listener. With the ability to provide expert security advice that highlights Cyber Security related risks, so risk or service owners can make well-informed and auditable decisions.
A history of working collaboratively and inclusively with external organisations and other stakeholders, sharing information and knowledge to achieve common aims.
A proven background in leadership, by providing guidance to staff to support the delivery of objectives.

Please fully utilise the 1000-word count when completing your Personal Statement.

Sift & Interview Dates 

The sift is due to take place from the week commencing Monday 21st October 2024.

Interviews and assessments are due to take place from Wednesday 30th October 2024.

This interview will be conducted via a video interview, details of which will be provided to you should you be selected for interview.  

We will try to meet the dates set out in the advert. There may be occasions when these dates will change. You will be provided with sufficient notice of the confirmed dates. 

The selection process will be designed specifically for the role. As a result, your assessment will include:

An interview.

You’re encouraged to become familiar with the Role Profile attached, as you may be assessed against any of the criteria recorded within.

The Department for Transport alongside other Government Departments recruit using Success Profiles. This means for each role we consider what you will need to demonstrate in order to be successful. This gives us the best possible chance of finding the right person for the job, drives up performance and improves diversity and inclusivity.

For further information on Success Profiles visit our Careers website .

DDaT Allowance

This role is part of the Digital Data and Technology profession and attracts an enhanced pay scale which is mapped to capability levels. The successful candidates starting salary will be determined by performance at interview and assessed capability level. There are two components to DDaT pay - base pay and DDaT allowance.

The role may also attract a DDaT allowance of up to £16,592. The amount, if afforded is determined by several factors one of which is assessed capability level.

The successful candidate will be required to undergo yearly capability assessments which may result in pay increases or decreases. A drop in capability in any given assessment period results in 12 month pay protection to allow candidates to retain prior capability level.

Reasonable Adjustments

As a Disability Confident Leader employer, we are committed to ensuring that the recruitment process is fair, accessible and allows all candidates to perform at their best. If a person with a visible or non-visible disability is substantially disadvantaged, we have a duty to make reasonable changes to our processes.

Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need during the recruitment process. For instance, you may need wheelchair access at an interview, or if you’re deaf, a Language Service Professional.

If you need a reasonable adjustment so that you can complete your application, you should contact Government Recruitment Service via dftrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Document Accessibility

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

This job advert contains links to the DfT Careers website . Our website provides useful guidance and information that can support you during the application process. If you cannot access the information on our website for any reason, please email DRGComms@dft.gov.uk for assistance.

Further Information

For more information about how we hire, and for useful tips on submitting your application for this role, visit the How We Hire page of our DfT Careers website. You can find detailed information about the recruitment process and what to expect when applying for a role.

Pre-employment Checking

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window) . See our vetting charter (opens in a new window) .

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality Requirements

This job is broadly open to the following groups:

UK nationals
nationals of the Republic of Ireland
nationals of Commonwealth countries who have the right to work in the UK
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) .

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window) .

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window) .

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

Name : Digital Resourcing Team
Email : DigitalResourcing@dft.gov.uk

Recruitment team

Email : dftrecruitment.grs@cabinetoffice.gov.uk

Further information

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance, you should contact Government Recruitment Services via email: dftrecruitment.grs@cabinetoffice.gov.uk

If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: Visit the Civil Service Commission website Here

Driver and Vehicle Standards Agency (DVSA) jobs

Cyber Security Risk Manager Lead (£40,808 - £57,400)