Location
London Borough of Croydon

Hours
Full Time, compressed hours available

Salary
£49,850 - £52,850 (National) / £53,850 - £56,850 (London)

About the Role
Home Office Digital designs, builds, and maintains IT services for the department, its Arms Length Bodies, wider government organisations, and the public. These systems support millions of visa applications, border crossings, passport applications, and police checks annually.

As a Senior Cyber Security Risk Manager within Home Office Cyber Security, you will play a key role in embedding Secure by Design principles across the organisation, driving the cultural change needed to foster a strong and positive security culture. You will collaborate with project teams to ensure cyber security is considered from the outset and recognised as a shared responsibility throughout the delivery lifecycle.

You will ensure Secure by Design activities are integrated into the organisation’s government gate review lifecycle so that security risks are addressed early and escalated appropriately. You will help escalate projects with low security confidence for additional support or oversight and promote a standardised approach to Secure by Design activities across projects, programmes, and portfolios. You will encourage the use of templates, tools, and checklists, such as the Secure by Design self-assessment tracker, to help teams consistently apply Secure by Design principles.

You will join an expert team of cyber professionals committed to reducing exposure to cyber-attacks on new and existing digital systems. The role offers a diverse and supportive organisational culture and a commitment to continuous professional development.

Where business needs allow, this role may be suitable for a combination of office and home-based working, with a minimum of 60% office presence expected.

Experience
- Demonstrable passion for Cyber Security
- Overseeing risk reviews, developing risk treatment plans, and communicating risks
- Planning and delivery of project-level activities
- Executing and documenting audits following agreed standards
- Maintaining integrity of records to support audit trails
- Communications and executive stakeholder engagement and management

About you
- Ability to explain how Secure by Design has been incorporated into digital delivery, including governance processes and team roles
- Experience working within established security and risk management governance structures
- Skilled in using communication toolkits to educate teams on Secure by Design practices
- Commitment to continuous learning and sharing knowledge across teams
- Ability to embed Secure by Design into onboarding processes and internal guidance
- Proactive in reviewing feedback and updating internal processes
- Up to date with the latest Secure by Design developments

Qualifications
- Strong understanding of the UK Government's Secure by Design policy and principles is desirable
- Security Check (SC) clearance required, with 5 years UK residency in the past 5 years
- Willingness to undergo Non-Police Personnel Vetting Level 3 (NPPV3) clearance if not already held