Cyber Security Consultant

Job summary

Can you identify cyber security risks and provide practical solutions?

Do you enjoy working with stakeholders to improve security outcomes and build resilience?

Have you gained experience in cyber security, risk management, security assurance or a related field?

If so, we’d love to hear from you!

As a Cyber Security Consultant, you will be part of the Cyber Security Services team, ensuring security risks are identified, assessed and managed across a range of business as usual (BAU) activities and supporting ongoing compliance.

Reporting to the Lead Cyber Security Consultant, the team is responsible for providing advice and guidance to IT workstreams delivering Driver and Vehicle Licensing Agency’s (DVLA’s) web services, liaising with other teams in the IT department, providing security architecture input to technical designs and solutions and acting as a source of advice and guidance to the cyber security team and the wider agency.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King’s birthday.
• Flexible working options where we encourage a great work-life balance.

Find out more about what it's like working at DVLA – Home , Civil Service Careers

Read more in the Benefits section below!

Job description

You will be an experienced cyber security professional who can:

• Apply your knowledge of cyber and information security.
• Assess risks to existing and proposed systems and technical solutions, and then devise risk management plans to address such risks.
• To a large degree manage your own time and resources to deliver the required outcomes.
• Be actively engaged in the major change programme being implemented at DVLA, including playing a role in solution evaluation and technology selection.
• Develop and maintain good relationships with a wide range of stakeholders.
• Work as part of a team to deliver cyber security services.
• Develop/progress your own skills and career and actively coach and develop others.

Your responsibilities will include, but aren’t limited to:

• Monitor the efficiency and effectiveness of the Cyber Security processes across the organisation and make recommendations for continual improvement.
• Pro-actively pre-empt and manage risks and issues, providing solutions and escalating as required.
• Provide timely subject matter expert advice and consultancy in accordance with HMG security guidelines and DVLA policy on IT and information security issues to DVLA staff and to the service provider.
• Be responsible for the production of relevant security documentation for DVLA systems in line with HMG Information Assurance guidance.
• Undertake ad hoc risk assessments in line with the agreed risk assessment methodology within agreed timescales in order to provide senior manager with the appropriate information to make information risk management decisions.
• Produce Security Management Plans for DVLA projects to agree security relevant activities for the lifecycle of the project.
• Ensuring that all IT teams follow cyber security processes and escalate any repeated non-conformity.

Great line management is important to us as an organisation, and we will equip and support line managers to develop the skills they need. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public.

For further information on the role, please read the attached role profile. Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Open Sessions: Would you like to find out more about the role, the team and what it’s like to work in our department? If so, we are organising an open session where you can virtually 'meet the team' on Wednesday 20th August at 1:00pm. Sign up here.

Person specification

Qualifications/licenses:

• Professional information security certification – CISMP or similar, or willingness to attain.

Required experience:

To be successful in this role you will need to have the following experience:

• Experience in a Cyber Security or Information Security role.
• Solid knowledge of various information security frameworks.
• Problem-solving and analytical skills.
• Effective verbal and written communication skills.
• Broad understanding of cloud-based technical environment.

Working for the DVLA Digital Team

At DVLA, licensing is just the start. Every project you implement, touch and deliver has a ripple effect that’ll wash across the nation. Here the work you’re doing has the capacity to change the way 53 million people interact with our services. As we aim to keep our roads some of the safest in the world, our innovative, transformative digital-led services help optimise a nation of individuals and business every single day.

To see how our people are transforming our digital services, head over to our DVLA Digital Services Blog and, to understand more about the great opportunities and benefits of working at DVLA read our Inside DVLA blog.

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 35 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (one of the locations cited in the advert) or, when required for business reasons, in another office/work location. There may be occasions where you are required to attend above the minimum expectation.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact d