National Cyber Force - Security Risk and Governance Lead

Job summary

Established in 2020, the National Cyber Force (NCF) is responsible for operating in and through cyberspace to counter, disrupt, degrade and contest those who would do harm to the UK or its allies, to keep the country safe and to protect and promote the UK’s interests at home and abroad. The UK will use cyber operations as part of its diplomatic, economic and military activities.

The NCF is at the heart of this, extending the UK’s competitive edge as a responsible, democratic cyber power, by countering threats from terrorists, criminals and states using the internet to operate across borders in order to do harm to the UK and other democratic societies. Countering threats which disrupt the confidentiality, integrity and availability of data and services in cyberspace (i.e. supporting cybersecurity), contributing to UK Defence operations, or helping deliver the UK’s foreign policy agenda (for example intervening in a humanitarian crisis to protect civilians). In addition to GCHQ and the Ministry of Defence, the Secret Intelligence Service and the Defence Science and Technology Laboratory are core partners bringing cutting edge espionage and research techniques.

Our people are at the heart of everything we do. Our vision is to have an empowered, productive, personally and professionally fulfilled workforce. Whatever your role, we take your career and development seriously. We want to enable you to build a successful career with the Department and wider Civil Service. We are committed to understanding, respecting, and representing as broad a range of views and backgrounds as we have in UK society. We know that diverse perspectives and experiences are critical to an effective, modern Civil Service.

This role supports NCF by owning security risk governance for the Partnership.

This position is advertised at 37 hours per week.

Job description

The Security Risk and Assurance Lead will own security risk governance for the Partnership. They will be the secretariat for security risk across all aspects of the Partnership and will mature security risk governance utilising a combination of expertise, pragmatism, and exceptional engagement skills.

The role will cohere a single view of security risk, will work with senior stakeholders across the business to ensure accountability for security risks, and will support Head of Security by providing assurance that security risks are suitably mitigated and that mitigations are being owned and delivered by those whom they are allocated to.

The successful candidate will build relationships across a complex multi-partner environment to ensure that risk appetites are understood and respected. You will support the provision of security advice and guidance to the workforce that is considerate of all Partner requirements.

As the Partnership continues to mature, so does the approach to security, and the Security Risk and Assurance Lead will be agile to supporting the changing needs of the Organisation, including the Transformation of the Organisation into the new HQ in the North West. It is critical that the successful candidate is a team player; that inclusion is at the heart of their approach to delivery; and that they feel comfortable navigating ambiguity. In return this job offers an opportunity to have strategic impact across a multi-agency Partnership, learning new perspectives and approaches, and enabling the delivery of a critical HMG mission. You will:

Own and maintain the Partnership Security Risk Register and be the secretariat to the associated governance.

Lead on the provision of security assurance, ensuring that security risks are suitably mitigated and that mitigations are being owned and delivered by those whom they are allocated to.

Represent all Partner requirements, manage and deliver bespoke security advice in accordance with the Partnership security posture.

Liaise across MOD in order to ensure that CSOC requirements are understood and form part of Partnership security planning.

Lead on liaison across the UK Vetting Agencies in order to provide ongoing assurance that the Partnership vetting policy can be met in line with the requisite timeframes to meet growth aspirations.

Person specification

You will have experience of working in a similar role within a secure environment for a government or private organisation.

You create and maintain positive, professional and trusting working relationships. These can be with a wide range of people within and outside your organisation. You identify connections and reach out to bring people together.

You work well as part of a team and strive to ensure the team pulls together and is effective.

You are positive and inspirational in leading and supporting others through change.

Clearance level required for role is DV plus screening. Checks involved include, but are not limited to:

• Successful completion of the Baseline Personnel Security Standard Completion, by the individual, of a DV Security Questionnaire

• A departmental/company records check which will include personal files, staff reports, sick leave returns and security records

• A check of both spent and unspent criminal records

• A check of credit and financial history with a credit reference agency

• A check of Security Service records

• A full review of personal finances

• A detailed interview conducted by a trained Investigating Office

• Further enquiries, including interviews with referees conducted by a trained Investigating Officer. Checks may extend to third parties included on the security questionnaire

• The full review of personal finances will include an assessment of an individual’s assets, liabilities, income and expenditure both on an individual basis and taking into account the joint position with a spouse or partner.

• Additionally, candidates will need to meet the business validation standard and pass a drug test prior to appointment.

Behaviours

We'll assess you against these behaviours during the selection process:

• Managing a Quality Service
• Changing and Improving
• Seeing the Big Picture
• Communicating and Influencing
• Working Together

We only ask for evidence of these behaviours on your application form:

• Managing a Quality Service
• Changing and Improving

Benefits

Alongside your salary of £46,040, Ministry of Defence contributes £13,337 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• London Allowance £3,300 per annum
• This role attracts a National Security Payment allowance of circa £2,500 p.a.
• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%

Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work