Senior Operational Security Specialist

Job summary

Are you passionate about protecting critical systems and improving organisational resilience?

Can you work collaboratively with stakeholders to strengthen security practices across organisations?

If so we’d love to hear from you.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at DVLA - Driver and Vehicle Licensing Agency - Department for Transport Careers

Job description

At DVLA, we’re responsible for keeping millions of drivers and vehicles moving safely across the UK. Behind the scenes, our digital and technology teams ensure that our systems are secure, resilient, and always available.

We’re looking for a Senior Operational Security Specialist to play a key role in safeguarding our services—leading on incident response, vulnerability management, and operational security assurance.

You’ll be at the heart of DVLA’s cyber defence, helping to detect, respond to, and prevent security threats. This is a hands-on, fast-paced role where you’ll work across teams to protect critical systems, assess risk, and continuously improve our security posture.

You’ll use your expertise to drive proactive security practices, ensure effective incident handling, and support the organisation in making risk-based decisions.

The role is part of the Government Security Profession Career Framework) and utilises an enhanced Capability–Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £44,241. In addition to this the role includes a Digital and Data allowance of up to £14,756.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process. Here are more details on the pay framework.

Your responsibilities will include, but aren’t limited to:

• Manage complex information systems to understand and prioritise actions on Cyber Security risks.
• Recommend remediation strategies and provide advice on complex configuration changes in support of vulnerability remediation.
• Manage an organisation’s response policies and processes to meet the needs in line with appropriate standards Plan, test, and respond to security incidents or concerns.
• Communicate the results of investigations and risk mitigation outcomes, guiding the organisation in the improvement and maintenance of a robust response to new threats and attack vectors.
• Provide specialist, tailored advice on mitigation, handling escalations with risk and service owners as appropriate.
• Manage cyber security protective countermeasures and operations to appropriately manage cyber risk.

For further information on the role, please read the attached role profile.

Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Great line management is important to us as an organisation, and we will equip and support line managers to develop the skills set out in the Civil Service Line Management Standards. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public.

Would you like to find out more about the role, the digital team and what it’s like to work at DVLA? If so, we are organising a familiarisation session where you can virtually 'meet the team' on Wednesday 12th August at 11:30am.

Please click here to book on.

Person specification

• Good understanding of cyber security principles, threats, and controls
• Knowledge of incident response lifecycle (prepare, detect, respond, recover, learn)
• Familiarity with vulnerability management tools, scanning processes, or patching approaches
• Understanding of risk management frameworks (e.g. ISO 27001, NIST, or similar)
• Ability to balance security, usability, and operational priorities
• Strong collaboration and stakeholder engagement skills
• Ability to influence decisions using evidence and risk-based thinking
• Confidence working in fast-paced or high-pressure environments, particularly during incidents
• A proactive mindset with a focus on continuous improvement
• Clear communication skills, including the ability to brief senior stakeholders

Working for the DVLA Digital Team
At DVLA, licensing is just the start. Every project you implement, touch and deliver has a ripple effect that’ll wash across the nation. Here the work you’re doing has the capacity to change the way 53 million people interact with our services. As we aim to keep our roads some of the safest in the world, our innovative, transformative digital-led services help optimise a nation of individuals and business every single day.

To see how our people are transforming our digital services, head over to our DVLA Digital Services Blog and, to understand more about the great opportunities and benefits of working at DVLA read our Inside DVLA blog

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 35 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (the location cited in the advert) or, when required for business reasons, in another office/work location. There may be occasions where you are required to attend above the minimum expectation.

If you have a question about hybrid w