UK Health Security Agency
Cyber & Corporate Risk Officer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber & Corporate Risk Officer
Civil Service Grade: Higher Executive Officer (HEO)
Salary: £33,422 to £45,353 per annum (pro rata)
Location: Birmingham, Leeds, Liverpool or London Canary Wharf (Hybrid Working)
Help Protect the UK's Health Security Through Cyber Risk Excellence
UK Health Security Agency (UKHSA) is seeking a Cyber & Corporate Risk Officer to join our growing Cyber Security team. This is an exciting opportunity to play a key role in strengthening cyber governance, risk management and assurance across an organisation that protects the nation's health security.
As part of our Cyber Governance, Risk & Compliance function, you will help provide a clear view of cyber risk across UKHSA, supporting informed decision-making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission.
This role offers a unique opportunity to develop expertise in cyber risk management within a complex and fast-paced organisation operating at the heart of national health security.
Security Clearance
This post requires successful candidates to achieve Security Check (SC) clearance before appointment.
To support the vetting process, applicants would normally have lived in the UK continuously for the previous five years. However, a shorter period of UK residency does not automatically prevent clearance being granted. Applicants with concerns regarding residency requirements should contact the recruitment team for advice.
About the Role
Reporting to the Senior Cyber Risk Officer, you will support the delivery of UKHSA's Second Line Cyber Risk Assurance function. You will provide independent oversight and challenge, helping ensure cyber risks are identified, understood and managed in line with UKHSA's risk appetite, government standards and public sector assurance expectations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You will work closely with programmes and business areas, including specialist environments such as Industrial Automation and Control Systems (IACS) and the Harlow site, helping to create a consolidated view of cyber risk and ensuring appropriate escalation where required.
As a Second Line function, the team does not implement or operate cyber security controls. Instead, it provides assurance and supports leadership by:
- Ensuring cyber risks are identified, assessed and escalated appropriately
- Improving transparency, governance and organisational assurance
- Supporting UKHSA's ability to deliver essential health security services
Key Responsibilities
- Support UKHSA's Second Line Cyber Risk Assurance function, providing oversight and challenge of cyber and technology risks.
- Review cyber risk assessments, controls and mitigation plans, ensuring risks are accurately recorded and managed.
- Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches.
- Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums.
- Support cyber assurance activities across digital change programmes, cloud services and third-party suppliers.
- Contribute to audits, lessons learned, assurance reviews and continuous improvement initiatives.
- Build expertise in cyber risk management through ongoing learning and development.
About You
Essential Criteria
- Experience or strong interest in Cyber Risk Management, Information Security, Technology Risk, or GRC
- Awareness of cyber security threats, vulnerabilities, and controls
- Ability to analyse information and present risks clearly and concisely
- Strong written and verbal communication skills
- Willingness to provide constructive challenge while building effective working relationships
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Criteria
- Knowledge of:
- Government Security Policy Framework
- NCSC principles
- Risk registers and assurance reporting
- DSPT Cyber Assessment Framework
- Industrial Automated Control Systems
Why Join UKHSA?
This role offers an opportunity to contribute directly to the UK's health security mission while developing valuable experience in cyber risk and governance. You will work alongside experienced professionals in a supportive environment, gaining exposure to a broad range of cyber security, assurance and risk management activities that have real national impact.
You will also receive:
- A generous Civil Service pension, with employer contributions averaging 28.97%
- Working on nationally significant technology services
- Exposure to complex, large-scale and diverse network environments
- Investment in learning, development and professional certifications
- A collaborative, supportive and inclusive culture
- Opportunities to influence the future of critical public sector technology
- Flexible working arrangements
Discover more about our rewards and benefits: Rewards and benefits – UKHSA | Civil Service Careers
For full details, including the selection process and how to apply, please click Apply to view the complete advert on Health Jobs UK.
This role closes on 14th September 2026 at 23.55
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location