Locations: Blackpool, Leeds, London, Manchester, Newcastle-upon-Tyne, Sheffield
Join our new Security Risk Assurance Team and help us drive continuous improvement across the Security Assurance service in DWP.
Could you be a Government Security Assurance Professional? Do you want to be part of an exciting and growing area of work? Are you willing to learn and develop and work towards qualifications while you deliver in a key role?
DWP is the largest government department, m,aking payment s worth £195bn a year to around 25 million people. You'll support DWP's Security Strategy by providing internal independent assurance to Senior Leaders, service owners, stakeholders and relevant external bodies that strategic security risks to DWP business objectives are being managed effectively.
This roles supports the vital second line of assurance within the Governments three lines of defence model.
About the team:
DWP is at the forefront of risk and controls based security within Government. We're leading on the tranches of the Transformed Security model in HMG.
Within DWP, the Enterprise Security Risk Management (ESRM) Security Risk Assurance team:
The Security Risk Assurance team undertake varied activities to gather evidence on the security of DWP assets, including interviews, sampling, design review, IT health checks and controls testing.
The team analyse findings from these activities to provide confidence that DWP is sufficiently secured against the NIST cyber security framework and make recommendations for areas for investment and improvement.
About your role:
As a Senior Security Risk Assurance Manager you'll work within a team to determine what information and evidence is required to enable assurance activity to be undertaken.
You'll use your security knowledge to provide security assurance to the product owner so have confidence their product is appropriately secured, and that DWP is secure to deliver its priorities.
Developing your skills with us
If you don't have a qualification in CGEIT, 27005 risk management professional, ISO27001 Lead Auditor, or PCIRM, COMTIA security+ then you'll be supported to work towards relevant qualifications here.
We welcome applications from security professionals who have built their skills and knowledge experientially too.
Experience of security management, and understanding of security controls, ISM systems, risk assessment and security monitoring/testing processes are welcome, but not mandatory and these will not be assessed.
Successful candidates must be prepared to undergo SC clearance prior to taking up duty.
What skills and experience do you need?
Your pay and reward
Salary for this role is £39,301 - £45,018 in London and £35,310 - £40,666 everywhere else.
You'll be eligible for a Civil Service Pension, with employer contributions worth around 27%.
We have a broad benefits package built around your work-life balance which includes:
Click Apply for more information and to start an application on Civil Service Jobs.