Location
Central London (Nationally based role)

Hours
Full Time

Salary
£42,859 per annum

About the Role
The Ministry of Justice (MoJ) Information Security Team plays a central role in enabling good security practices across the department. This is achieved through the provision of security policies, guidance, education, and by understanding cyber security risks from all parts of the MoJ. The team provides assurance to the departmental SIRO, the Permanent Secretary, and other senior stakeholders that these risks are effectively managed to support MoJ objectives.

The Security Risk & Assurance Practitioner will support the central MoJ Information Security Team in delivering cyber security assurance activities. This includes identifying non-compliance with required standards, raising and communicating cyber security risks arising from control gaps, and working across a diverse range of digital services, technologies, and business functions.

Key responsibilities include reviewing services and systems, analysing evidence, identifying risks and opportunities for improvement, and communicating findings to a wide range of stakeholders. The role also involves advising on good risk management practices, identifying trends from risk and assurance activities, proposing improvements to processes, policies and guidance, and supporting senior team members with tactical requests.

All team members contribute to developing the MoJ Security Function as a centre of excellence, fostering a brilliant, diverse, and inclusive team environment. The post holder will engage in a variety of assurance, risk, and governance activities, working collaboratively to continuously improve security practices, processes, and decision-making across the department.

Experience
- Experience working within a security, technology, risk, governance, assurance, audit, operational or analytical environment.
- Comfortable analysing information from multiple sources and forming evidence-based conclusions.
- Strong analytical, problem-solving and investigative skills.
- Ability to review complex information and identify key risks, themes and opportunities for improvement.
- Good written communication skills with the ability to produce high-quality reports, assessments and briefing materials.
- Confident engaging with stakeholders and explaining technical concepts to non-technical audiences.
- Interest in technology and cyber security, including modern cloud and digital services.
- Adaptable and willing to contribute across a broad range of activities rather than specialising in a single area.
- Methodical, inquisitive and willing to challenge constructively where necessary.
- Attention to detail and appropriate discretion when handling sensitive or confidential information.

About you
You are curious, collaborative and comfortable working across a variety of topics and activities. You demonstrate behaviours aligned with Managing a Quality Service, Delivering at Pace, Communicating and Influencing, Making Effective Decisions, and Changing and Improving.

Qualifications
Specific qualifications are not stated; however, knowledge of cyber security and risk management may be assessed during the selection process.