People Function Cyber Security Lead

Job summary

We are looking for a Grade 7 Cyber Security Lead, to help shape how cyber security is built into digital services used across the Defence People Ecosystem. You will provide senior assurance, influence major transformation activity, and help ensure cyber risks are understood and managed before they affect delivery or live service. This is an opportunity to strengthen the resilience of important people services, improve confidence in digital delivery, and build a lasting cyber security capability across the portfolio.

This position is advertised at 37 hours per week. Part time and job sharing arrangements may be considered provided that full time hours are covered.

Job description

The People DDaT team is a small enabling team at the heart of the People Function. It provides strategic leadership on digital, data and technology, coheres demand for People products and services, and provides expert advice, guidance, and assurance so that services align with strategic intent and appropriate standards.

The Defence People digital ecosystem is becoming more complex as major programmes modernise corporate services and introduce new platforms and service connections. The current model relies heavily on programme teams, suppliers, and external specialists for cyber input, which can lead to inconsistent standards, limited independent challenge and security risks being identified too late in delivery.

The Cyber Security Lead will work across the Defence People digital portfolio, including major transformation activity. At Grade 7, the role is expected to lead through influence, set clear cyber expectations, provide senior assurance, and challenge, and help shape portfolio decisions.

This is a leadership and assurance role, not a substitute for service or programme level cyber delivery or supplier accountability.

The role will focus on the highest-risk and highest-impact services, providing proportionate assurance where cyber risk has the greatest effect on people services and portfolio outcomes.

Main Duties

• Set direction for cyber security assurance across the People digital portfolio, ensuring risks are identified, understood, escalated, and managed early in delivery.
• Lead the adoption of secure-by-design principles across the People digital portfolio, ensuring security is considered from discovery through to live service.
• Provide senior, independent cyber security challenge to programmes, suppliers, and delivery teams, ensuring assurance is proportionate, evidence-based and aligned to business outcomes.
• Work with the Chief Technology Officer and enterprise architecture function to shape technology strategy, roadmaps, solution designs, and transition plans so that security is built in from the outset.
• Define and maintain common cyber security expectations, patterns, standards, assurance routes, and reusable guidance for People digital services.
• Influence governance forums by presenting clear advice on cyber security risk, design trade-offs, compliance issues, delivery implications, options, impacts, and recommendations.
• Build effective senior relationships across Defence Reform Areas (including the Military Commands), Defence People communities, Defence Business Services, Defence Digital, delivery partners, and suppliers, while strengthening internal cyber capability and reducing avoidable reliance on external consultancy.

Person specification

You should consider applying if you can show strong evidence that you can:

• Lead cyber security assurance or technical security leadership in a complex digital, technology, transformation, or regulated environment.
• Apply secure-by-design principles to services, platforms, architecture, suppliers, data flows, or delivery plans.
• Assess cyber risk and translate findings into clear, proportionate advice for senior decision-making.
• Influence stakeholders, delivery teams, suppliers, or governance forums to improve security outcomes.
• Explain complex cyber issues in plain English, including options, trade-offs, impacts, mitigations, and recommendations.

You are likely to be a strong candidate if you combine practical cyber security knowledge with sound judgement, constructive challenge, and clear communication.

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

• Communications - Communicate complex cyber security issues in plain English, including risks, trade-offs, mitigations and recommendations, so that senior leaders, programmes and suppliers understand what action is needed.
• Designing Secure Systems - Lead secure-by-design thinking across services, platforms, integrations and data flows, ensuring security requirements are considered from discovery and design through to delivery and live service.
• Enabling and informing risk-based decisions - Enable proportionate, evidence-based decisions by explaining cyber risk, assurance status, delivery implications and options, and by escalating material risks through the right governance routes.
• Understanding security implications of transformation - Understand how transformation changes cyber risk across people processes, data, platforms, suppliers and operating models, ensuring security is considered early when services are designed.

Benefits

Alongside your salary of £61,630, Ministry of Defence contributes £17,854 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%
• Further details about benefits are available Discover My Benefits
• This post may be eligible for a Digital Skills Allowance of up to £15,300 per annum.

Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work in another MOD workplace, will also count towards this level of office attendance. Applicants can request further information regarding how this and other flexible working arrangements may work in their team from the Vacancy Holder (see advert for contact details). Defence Business Services cannot respond to any questions about working arrangements.

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer acc