UK Home Office
Lead Cyber Security Risk Manager

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Location: Glasgow | Croydon | Sheffield | Manchester (hybrid with 60% office attendance)
Salary: £62,732 plus skills allowance of up £17,668
Close date: 3rd September at 11:55pm
In this critical role, you will identify, understand and mitigate cyber-related risks and evaluate the risks to our critical national infrastructure and business critical systems. You will use your expertise to draw on a range of evidence to proactively advise stakeholders, enabling well-informed, risk-based decision making.
You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.
Job description
The Lead Cyber Risk Manager supports, plans and develops the implementation and management of organisation-wide processes and procedures for the management, assurance or governance of cyber risk.
They will provide tailored expert support and advice that highlights cyber security risks to a range of stakeholders, projects, business teams and service owners, helping them to remedy identified risks by enabling well-informed and auditable decisions, using published guidance and standards, and drawing on a range of experts as well as personal expertise.
Main Responsibilities
- Independently and impartially undertaking risk management activities within a given area of practice or expertise, usually within established security and risk management governance structures. You will lead the independent derivation and analysis of security needs and conduct tailored threat assessments, security audits, or other risk management activities, ensuring consistency with regulations and legislation.
- Developing risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies.
- Communicating effectively with senior stakeholders to ensure they recognise the importance of security considerations and advising senior stakeholders on their approach to risk assessment in the context of their organisational outcomes.
- Managing risk management processes, reviewing their efficiency and effectiveness, and leading recommendations for continuous improvement. This includes reviewing internal controls following any security breach, providing advice on how to remediate any vulnerabilities discovered, and agreeing and overseeing remedial solutions, controls and safeguards.
- Assessing reviews and risk assessments and ensuring identified risks are managed in accordance with Home Office risk management policies.
- This role currently is responsible for leading a small team of Civil Service Cyber Risk Managers.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills
- Information or cyber security including threat and risk analysis for complex, high-risk and/or mission critical systems, preferably involving the Home Office, Cabinet Office, NCSC or within industry Security Operations Centres (SOCs) and departments.
- Proficiency analysing or implementing technical or security policies in a large organisation. Skilled in balancing security requirements with business impact to ensure practicality and effectiveness.
- Ability to champion cybersecurity risk and ensure ongoing appropriateness or practices.
- Proven track record in implementing cybersecurity risk, assurance or governance processes and procedures.
- Proven ability to lead and mentor a diverse team of governance, risk or assurance specialists.
- Ability to design and implement security controls aligned with organisational requirements, whilst navigating changes and proactively responding to evolving risks.
- Strong ability to present technical information to non-technical stakeholders and the ability in influencing decision-making processes at senior leadership levels, promoting security priorities.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why work for us...
Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:
- A Civil Service Pension with employer contribution rates of at least 28.97%.
- In-year reward scheme for one-off or sustained exceptional personal or team achievements.
- 25 days annual leave on appointment, rising with service.
- 8 days of public holidays, plus 1 additional privilege day.
- Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.
Please click on apply now to be taken to the full job advert and application portal
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills