Information and Cyber Risk Assurance Advisor

Birmingham, Bristol, Cardiff, Darlington, Edinburgh, London, Salford

Job Summary

The Integrated Corporate Services (ICS) is a shared corporate service. It provides corporate services (HR, Finance, Digital, Commercial, Security and Estates) across the Department for Energy Security & Net Zero (DESNZ) and the Department for Science, Innovation & Technology (DSIT).

Our team of over 400 professionals will be leading the way in how these functions will be delivered in the future. Our ambition is to be the leading provider of integrated corporate services for government and set the standard for quality, efficiency, and innovation in our field.

We offer great working benefits including a world-class pension, flexible working options and a career where your learning and development is taken seriously. We are enormously proud to be a Disability Confident Leader employer. We support candidates with adjustments throughout our recruitment process. Information about disability confidence and just some examples of the adjustments that you can request can be found in the reasonable adjustment section below.

Find Out More

You can also follow our LinkedIn Careers Page: https://www.linkedin.com/showcase/desnz-careers/

Job Description

Are you interested in joining a high performing team of security professionals? If you are ready to challenge yourself and become a member of a specialist security team, then we have a great opportunity for you.

We need an organised, proactive and flexible individual to provide Information and Cyber Security Risk Management and Assurance functions for ICS HMG customers including — the Department for Energy Security & Net Zero - and within the Departmental Security Unit (DSU), including support to Arm’s Length Bodies.

The Information & Cyber Risk Assurance Advisor identifies, understands and advises cyber related risks affecting information, systems, platforms and business processes. They identify and evaluate security risks across complex digital services and operational environments and proactively provide proportionate, evidence based advice to stakeholders at a variety of levels. The role supports delivery by enabling well informed, auditable, risk based decisions while maintaining appropriate security standards.

The role is operational delivery and technical combining cyber risk management, GovAssure delivery, application and platform assurance and operational security support. The postholder will also provide technical leadership, line management and support and deputise for the Deputy Chief Information Security Officer when required. Your role will also serve as the lead for ICS and its customers on cyber incidents - often at pace – including within significant cross Government activities, contributing your expertise and supporting your peers. When the need arises, you will be expected to deputise for the Deputy CISO.

While some elements of this role can be delivered remotely, the successful candidate will be expected to work from our contracted office a minimum of 40-60% of their time. Regular visits will be required to London and other offices. If not based in the London office, frequent travel to London or other Places for Growth offices may be required, including at short notice or on the same day.

Person specification

• Lead cyber security risk management and assurance activities within established governance frameworks.
• Identify, analyse and assess cyber risks to information, systems, platforms and business processes, including threat assessments and risk-based exceptions.
• Derive and assess security requirements aligned to legislation, policy and recognised standards. Provide proportionate security advice to technical and non-technical stakeholders.
• Partner with ICS Digital to support live services, incident management, escalations and remediation activities.
• Provide clear, evidence-based advice on cyber risk, impact and mitigation, enabling informed and auditable business decisions.
• Produce high-quality risk assessments, assurance reports, recommendations and briefing material for senior stakeholders.
• Deliver GovAssure activities, including WebCAF development, evidence management, remediation planning and future assurance preparation.
• Provide security assurance for applications, platforms and services through Secure by Design reviews, penetration testing, architectural governance and go-live assurance.
• Support cyber security operations, including incident response, operational escalations and on call Duty Officer responsibilities.
• Develop and maintain cyber security policies, standards and guidance through consultation and governance processes.
• Act as a trusted advisor to ICS customer including, DESNZ and Arm's Length Bodies, representing the security function at boards, forums and governance groups.
• Represent ICS and the Department at cross-government security forums, contributing to standards, guidance and best practice.
• Provide technical leadership and line management to cyber security professionals, supporting capability development, quality assurance and succession planning.
• Support and deputise for the Deputy Chief Information Security Officer, escalating significant cyber risks and providing leadership when required.
• As a line manager, set objectives, support development and manage the performance of team members.