Location
Hybrid working based at UK Health Security Agency core HQ in London Canary Wharf - 10 South Colonnade, London E14 4PU. Hybrid model requires a minimum of 60% of contractual hours (approximately 3 days a week) working onsite.

Hours
Full Time - standard Civil Service working hours

Salary
£46,310 - £52,113 per annum, pro-rata

About the Role
We are seeking a Senior STRAPSO, Governance & Rosa Manager to lead and manage risks identified by both Physical Security and Personal Security functions within UKHSA. You will oversee the Security Risk Assurance Decision (SRAD) process, working closely with risk managers to implement contingencies that resolve, reduce, or manage identified risks. This role requires induction onto the STRAP regime, which regulates access to sensitive intelligence material requiring enhanced protective handling.

You will set and lead people strategy aligned to organisational objectives, actively manage the SRAD process including risk identification, recording, mitigation proposals, and escalation. You will manage the SRAD database, ensuring risk owners update interventions and appropriate risks are raised at corporate governance meetings according to threat, harm, risk likelihood, and RAG matrix status.

Additional responsibilities include drafting and publishing UKHSA policy on Security Risk Management Framework, producing management information and risk reporting for Executive Committee and Annual Security Report, managing ROSA accounts, validating security clearances, and administering two-factor authentication keys and user enrolment.

You will deliver the STRAPSO Security Policy Framework, liaise across government and with the central STRAP Authority, ensure STRAP information and assets are handled according to policy, and provide briefings and inductions. You will manage applications for clearances and role changes, provide secure administrative control of sensitive material, support compliance with information management policies, and contribute to wider security functions protecting personnel, physical, and information assets.

The role requires close collaboration with UKHSA Cyber and information risk managers to identify interdependencies between physical, personnel, information, and cyber security. Reporting to the UKHSA Security Advisor, you will drive a coordinated, process-driven security risk management culture across UKHSA and DHSC.

You will also act as deputy Rosa manager, overseeing the cross-government information management system for protectively marked ‘secret’ data assets, and advise on UKHSA Security Risk Management policies and guidance, interpreting CEO and Executive Committee risk tolerance to guide risk owners.

This role is part of the wider Government Security Profession and may involve supporting UKHSA’s incident response activities as required.

Experience
- Policy development and delivery experience
- Experience identifying, recording, and mitigating security risks, working with risk owners to implement risk management proposals
- Experience managing security risk management processes, databases, records, and reporting to support organisational governance and decision-making
- Experience handling, storing, transmitting, and protecting highly sensitive or classified information in accordance with security policies, procedures, and government standards
- Experience managing and administering security clearances, access controls, account applications, or secure information systems
- Experience providing advice, guidance, briefings, or training to stakeholders on security policies, procedures, and compliance requirements

About you
Professional, proactive, and able to engage effectively across multiple teams and government departments. Strong communication and leadership skills to advise, guide, and inform colleagues at all levels. Ability to work collaboratively with cyber and information risk managers and to drive a culture of security risk management. Commitment to upholding security standards and confidentiality.

Qualifications
- Full UK Nationality or dual/multi-nationality with British nationality as one part (subject to case-by-case review)
- Eligibility for Developed Vetting (DV) clearance, including a 10-year verifiable UK-based residency with no absences of 3 months or more in any 12-month period
- Membership or associate status of the Security Institute is desirable but not essential
- Knowledge of NPSA and security experience is advantageous