UK Ministry of Defence
People Function Cyber Security Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Bristol, Corsham, London, with hybrid working subject to business need.
Job Summary
We are looking for a Grade 7 Cyber Security Lead, to help shape how cyber security is built into digital services used across the Defence People Ecosystem. You will provide senior assurance, influence major transformation activity, and help ensure cyber risks are understood and managed before they affect delivery or live service. This is an opportunity to strengthen the resilience of important people services, improve confidence in digital delivery, and build a lasting cyber security capability across the portfolio.
This position is advertised at 37 hours per week. Part time and job sharing arrangements may be considered provided that full time hours are covered.
Job Description
The People DDaT team is a small enabling team at the heart of the People Function. It provides strategic leadership on digital, data and technology, coheres demand for People products and services, and provides expert advice, guidance, and assurance so that services align with strategic intent and appropriate standards.
The Defence People digital ecosystem is becoming more complex as major programmes modernise corporate services and introduce new platforms and service connections. The current model relies heavily on programme teams, suppliers, and external specialists for cyber input, which can lead to inconsistent standards, limited independent challenge and security risks being identified too late in delivery.
The Cyber Security Lead will work across the Defence People digital portfolio, including major transformation activity. At Grade 7, the role is expected to lead through influence, set clear cyber expectations, provide senior assurance, and challenge, and help shape portfolio decisions.
This is a leadership and assurance role, not a substitute for service or programme level cyber delivery or supplier accountability.
The role will focus on the highest-risk and highest-impact services, providing proportionate assurance where cyber risk has the greatest effect on people services and portfolio outcomes.
Main Duties
- Set direction for cyber security assurance across the People digital portfolio, ensuring risks are identified, understood, escalated, and managed early in delivery.
- Lead the adoption of secure-by-design principles across the People digital portfolio, ensuring security is considered from discovery through to live service.
- Provide senior, independent cyber security challenge to programmes, suppliers, and delivery teams, ensuring assurance is proportionate, evidence-based and aligned to business outcomes.
- Work with the Chief Technology Officer and enterprise architecture function to shape technology strategy, roadmaps, solution designs, and transition plans so that security is built in from the outset.
- Define and maintain common cyber security expectations, patterns, standards, assurance routes, and reusable guidance for People digital services.
- Influence governance forums by presenting clear advice on cyber security risk, design trade-offs, compliance issues, delivery implications, options, impacts, and recommendations.
- Build effective senior relationships across Defence Reform Areas (including the Military Commands), Defence People communities, Defence Business Services, Defence Digital, delivery partners, and suppliers, while strengthening internal cyber capability and reducing avoidable reliance on external consultancy.
Person Specification
You should consider applying if you can show strong evidence that you can:
- Lead cyber security assurance or technical security leadership in a complex digital, technology, transformation, or regulated environment.
- Apply secure-by-design principles to services, platforms, architecture, suppliers, data flows, or delivery plans.
- Assess cyber risk and translate findings into clear, proportionate advice for senior decision-making.
- Influence stakeholders, delivery teams, suppliers, or governance forums to improve security outcomes.
- Explain complex cyber issues in plain English, including options, trade-offs, impacts, mitigations, and recommendations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You are likely to be a strong candidate if you combine practical cyber security knowledge with sound judgement, constructive challenge, and clear communication.
Behaviours
We'll assess you against these behaviours during the selection process:
- Leadership
- Communicating and Influencing
Technical skills
We'll assess you against these technical skills during the selection process:
- Communications - Communicate complex cyber security issues in plain English, including risks, trade-offs, mitigations and recommendations, so that senior leaders, programmes and suppliers understand what action is needed.
- Designing Secure Systems - Lead secure-by-design thinking across services, platforms, integrations and data flows, ensuring security requirements are considered from discovery and design through to delivery and live service.
- Enabling and informing risk-based decisions - Enable proportionate, evidence-based decisions by explaining cyber risk, assurance status, delivery implications and options, and by escalating material risks through the right governance routes.
- Understanding security implications of transformation - Understand how transformation changes cyber risk across people processes, data, platforms, suppliers and operating models, ensuring security is considered early when services are designed.
Benefits
Alongside your salary of £61,630, Ministry of Defence contributes £17,854 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).
- Learning and development tailored to your role
- An environment with flexible working options
- A culture encouraging inclusion and diversity
- A Civil Service pension with an employer contribution of 28.97%
Further details about benefits are available Discover My Benefits.
This post may be eligible for a Digital Skills Allowance of up to £15,300 per annum.
Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work in another MOD workplace, will also count towards this level of office attendance. Applicants can request further information regarding how this and other flexible working arrangements may work in their team from the Vacancy Holder (see advert for contact details). Defence Business Services cannot respond to any questions about working arrangements.
The post does not offer relocation expenses.
External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.
Please Note: Expenses incurred for travel to interviews will not be reimbursed.
Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.
Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.
MOD Recruitment Satisfaction Survey – We may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Policy Notice sets out how we will use your personal data and your rights.
Artificial intelligence
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.
Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.
To apply, please upload your CV in the relevant section on the Civil Service Jobs application section, ensuring it clearly demonstrates how you meet the essential criteria outlined in the person specification. You must also submit a statement of suitability (maximum 1,000 words) providing evidence of how you meet these criteria.
Please find a link to our video, which gives you helpful tips and guidance, on the CS Jobs application process: How to apply for roles on Civil Service Jobs
At sift, candidates will be assessed against their CV and statement of suitability.
Behaviours
At interview, candidates will be assessed against the following:
- Leadership
- Communicating and Influencing
Technical Skills
Government Digital and Data Profession Capability Framework - Lead Security Architect
- Communications
- Designing Secure Systems
- Enabling and informing risk-based decisions
- Understanding security implications of transformation
Presentation
Candidates will also be asked to prepare and deliver a 5-minute (maximum) presentation on a topic related to the role. Further details will be provided prior to interview.
Further Information
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location