Department for Transport (DfT), United Kingdom
Group Cyber Security Assurance Principal
Get notified of more jobs like this Ā· No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
477691 Group Cyber Security Assurance Principal
Department for Transport
Apply before 11:55 pm on Sunday 11th October 2026
š Location: London (This role is suitable for hybrid working)
š· Salary: Ā£62,034 - Ā£82,430
The base pay is Ā£62,034. In addition to this the role includes a Digital and Data allowance of up to Ā£20,396.
A Civil Service Pension with an employer contribution of 28.97%
šļø Contract Type: Permanent ā Flexible working, Full-time, Job share, Part-time
šļø Available Positions: 1
About the Role
As a Group Cyber Security Assurance Principal, you'll play a leading role in strengthening cyber resilience across the Department for Transport Group. You'll provide expert assurance, oversight and guidance to help ensure security controls are effective, risks are managed appropriately and government security requirements are consistently applied.
Working within the Assurance, Compliance and Controls function, you'll lead cyber security assurance activities across a complex organisational landscape. You'll oversee the delivery of the Government Cyber Action Plan (GCAP), monitor compliance with the NCSC Cyber Assessment Framework and champion the application of Secure by Design principles across the DfT Group.
You'll work closely with senior stakeholders to assess cyber risks, develop assurance frameworks and provide expert advice on security governance, compliance and risk management. You'll also support the implementation of targeted improvement plans, communicate emerging threats and help drive continuous improvement in cyber security maturity across the organisation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet ā that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right ā and where to focus when applying.
Top Responsibilities
- Overseeing the delivery of the GCAP across the group.
- Developing and implementing the cyber security assurance framework across the group.
- Leading cyber security related risk assessments and other expert risk management activities and enhance cyber security governance arrangements.
- Leading the assurance of āsecure by designā principles across the DfT Group.
- Reviewing and reporting on the Groupās compliance with NCSCās Cyber Assessment Framework and monitor the progress of action plans to improve compliance.
For more information on the role and responsibilities please see the full job advert on CS Jobs using the link provided.
Benefits
- Employer pension contribution of 28.97% of your salary.
- 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave).
- 8 Bank Holidays plus an additional Privilege Day to mark the Kingās birthday.
- Access to the staff discount portal.
- Excellent career development opportunities and the potential to undertake professional qualifications relevant to your role paid for by the department, such as CIPD, Prince2, apprenticeships, etc.
- Joining a diverse and inclusive workforce with a range of staff communities to support all our colleagues.
- 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
- Flexible working options where we encourage a great work-life balance.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About You
To be successful in this role you will need to have the following experience:
- Experience of implementing cyber security policies, standards, and assurance frameworks in a large, complex organisation to improve compliance.
- Strong knowledge of security threats, risk management, and mitigation strategies.
- Experience of incident response and crisis management.
- Knowledge of protective security, ISO 27001/2, NCSCās Cyber Assessment Framework and Government Functional Standard GovS 007: Security.
- Experience delivering quality service in high-pressure environments.
- Professional qualifications or willingness to work towards industry-recognised qualifications in information risk and ISO 27001 (e.g. Management of Risk Practitioner, Certified ISO 27001 Practitioner and/or CISSP).
Additional Information
The role is part of the Government Security Profession Career Framework and utilises an enhanced CapabilityāBased Pay Framework which provides access to a Digital and Data allowance.
The base pay is Ā£62,034. In addition to this the role includes a Digital and Data allowance of up to Ā£20,396. The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.
How to Apply
š Read the full description and apply here: https://bit.ly/4hMfTIp
This vacancy closes at 23:55 on Sunday 11th October 2026
āIt took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what Iāve been looking for.ā
Jessica, London
Location