Cyber Security Risk Manager

Cyber Security Risk Manager

Location: London, England
Salary: £56,070 – £72,466 (Employer provided)
Reference number: 416863
Contract type: Permanent
Job grade: Grade 7
Department: Government Digital Service (GDS), Office of the Chief Technology Officer
Working pattern: Full-time | Flexible | Part-time | Job share | Compressed hours
Number of positions: 1

Locations

Bristol, London, Manchester

About the Role

The Government Digital Service (GDS), part of the Department for Science, Innovation and Technology (DSIT), is the central digital hub of the UK government. This role sits within the Office of the Chief Technology Officer (OCTO), helping departments manage cyber risks, improve resilience, and implement the Government Cyber Security Strategy.

You’ll collaborate with central departments, the National Cyber Security Centre (NCSC), and the Government Security Group to advise on technical security matters and ensure critical digital services remain secure.

Key Responsibilities

• Advise on identifying and managing cyber risks (Secure by Design principles)
• Support risk-based decision-making across programs and services
• Develop guidance aligned with NCSC, GovAssure, and Secure by Design frameworks
• Ensure appropriate controls are in place through collaboration with digital teams
• Communicate risk assessments and mitigation strategies to senior stakeholders
• Monitor emerging threats and compliance trends
• Contribute to governance and assurance reporting
• Lead and mentor within the security team

Person Specification

We’re looking for candidates with:

• Demonstrated cyber security risk management experience
• Ability to write clear, user-centered guidance
• Experience managing risk registers and supporting governance
• Technical and non-technical risk communication skills
• Senior stakeholder engagement experience
• Awareness of threat landscapes and controls effectiveness
• Project planning and delivery experience in a security context
• Experience leading or facilitating strategy and response workshops

Benefits

• Flexible hybrid working (40–60% in-office expected)
• 25–30 days annual leave + King’s birthday leave
• Civil Service Pension (avg. employer contribution 28.97%)
• In-year bonus scheme
• Training budget and 10 annual learning days
• Employee discounts and cycle-to-work scheme
• Death-in-service benefits
• Paid volunteering days (5 per year)
• Employee assistance program

Sponsorship

Visa sponsorship is not available for this role.

Selection Process

• Submit CV and cover letter (up to 750 words)
• Shortlisted applicants will be invited to a 90-minute video interview (including a presentation)
• Assessment based on Civil Service Success Profiles:
  • Working together
  • Making effective decisions
  • Leadership
  • Developing self and others
  • Seeing the bigger picture
  • Communicating and influencing

Technical Skills Assessed

• Analysis
• Communication
• Enabling risk-based decisions
• Research & innovation
• Security technology
• Security implications of transformation

Key Dates

• Sift completion: 4 August 2025
• Interviews: Week commencing 11 August 2025
• A 12-month reserve list may be held for future openings.

Eligibility

Open to:

• UK and Irish nationals
• Commonwealth citizens with right to work
• EU/EEA/Swiss nationals with settled/pre-settled status
• Other eligible individuals under UK immigration laws

Application Contact

Email: gdsrecruitment@dsit.gov.uk.

Or click official website to apply