Location
London Borough of Croydon

Hours
Full Time - Compressed hours available

Salary
£49,850 - £52,850 (National) / £53,850 - £56,850 (London). New entrants start on the minimum of the pay range. Existing civil servants subject to level transfer and promotion policies.

About the Role
Home Office Digital designs, builds and develops services supporting millions of visa applications, border crossings, passport applications, and police checks annually. As a Senior Cyber Security Risk Manager, you will play a key role in identifying, assessing and mitigating cyber-related risks to information, processes, critical national infrastructure, and business-critical systems. You will provide expert advice to stakeholders across the organisation to support informed, risk-based decision-making and contribute to the continuous improvement of risk systems, processes, and frameworks.

You will join a team of cyber professionals dedicated to reducing exposure to cyber-attacks on digital systems. The role offers a supportive and diverse organisational culture with a commitment to your continuous development.

Where business needs allow, this role may be suitable for a combination of office and home-based working, with a minimum of 60% office presence expected. Occasional travel to other locations may be required.

Main responsibilities include developing and assuring risk management policies, embedding risk management frameworks across the business, conducting cyber security risk and threat assessments, communicating risk outcomes effectively, providing advice on risk mitigation, supporting decision-making with clear security guidance, and delivering risk-oriented training to stakeholders.

Experience
- Demonstrable experience and passion for Cyber Security.
- Reviewing and performing risk assessments, developing risk treatment plans, and communicating risks.
- Identifying risk indicators and explaining prevention measures.
- Executing and documenting audits following agreed standards.
- Maintaining integrity of records to support audit trails.
- Championing cyber security risk and ensuring ongoing appropriateness of practices.
- Communicating technical requirements effectively to both technical and non-technical stakeholders.

About you
Enthusiastic and committed to cyber security risk management with strong communication skills. Able to work within governance structures and support continuous improvement. Comfortable providing advice and training to a range of stakeholders and working collaboratively within a diverse team.

Qualifications
While specific qualifications are not explicitly stated, candidates should demonstrate capability aligned with the Home Office Government Digital and Data Profession Career Framework and the SFIA version 8 technical framework, particularly in:
- Information Assurance (INAS) – Level 3
- Information Security (SCTY) – Level 3
- Risk Management (BURM) – Level 3
- Audit (AUDT) – Level 3
- Specialist Advice (TECH) – Level 3
- Stakeholder Relationship Management (RLMT) – Level 3

Security clearance is required: Security Check (SC) clearance with normally 5 years UK residency in the past 5 years (exceptions may apply). Non-Police Personnel Vetting Level 3 (NPPV3) clearance is also required, and candidates must be willing to undergo the vetting process.

Note: Visa sponsorship is not available for this role.