Head of Operational Information Security, Risk and Assurance

Job summary

We are transforming DCMS to meet the demands of an agile, delivery-focused department leading on some of the highest priority work for the government’s agenda to drive growth, enrich lives and level-up society.

Our modernisation plans include critical investment in our systems, ensuring they are fit for purpose and reducing the manual input required, as well as the ongoing development of a new central function to transform the way DCMS uses technology, data and digital services.

We also want to transform how we solve policy challenges by having user centred design and collaboration within multi-disciplinary teams at the heart of what we do.

This is an incredibly exciting time to join the team within DCMS. Our mission is to digitally enable how DCMS delivers its priority outcomes which can adapt and respond to the changing needs of the sectors and partners we work with. Can you help us get there?

Job description

Role responsibilities:

• This is a leadership role that oversees three distinct technical teams.
• Own and maintain the information security assessment process, supporting privacy and secure by design principles across operational projects and business-as-usual activity.
• Ensure the team maintain and implement information security procedures, guidance and self-help tools to support consistent compliance across the organisation.
• Ensure the team delivers training and practical support to improve understanding of data protection and information management compliance.
• Ensure that the team maintain accurate records and that monthly and annual reporting is produced for cyber risk, data protection and information management compliance activity.
• Lead and manage the team (three G7s directly and up to six staff indirectly), ensuring clear priorities, effective delivery, performance management and development support, and appropriate representation at relevant meetings.
• Clear Board and Executive Committee reports on data protection and information management compliance and present at Board level as required.
• Manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management.

Person specification

The ideal candidate would have the following key skills and experience, please note that desirable skills will only be used in the event of tied candidates.

Essential requirements:

• Expert-level ability and experience of successfully identifying, managing, and mitigating cyber and information risks, supported by a formal qualification (e.g. IRM, CRISC, or equivalent).
• Experience developing and leading security assurance frameworks and audit activities to provide organisational confidence.
• Demonstrable skill in and experience of providing evidence-based advice to senior leaders/Boards and translating complex technical risks for non-specialist audiences.
• Experience leading multi-disciplinary teams of cyber risk, information management or data protection specialists, balancing operational delivery with professional development across boundaries.
• Understanding of fundamental data protection principles, UK privacy legislation and their application in a large organisation, and evidence of delivering privacy compliance through others.

Desirable skills:

• Working knowledge of either GovAssure, Secure by Design, or the Government Cyber Security Strategy.
• An understanding of supply chain risk management including PESTLE analysis and/or experience of holistic information management via Knowledge and Information Management (KIM) teams would be beneficial.

We are running an information session where prospective applicants can find out more about the role. This will be hosted by David Booth.

The session will be an opportunity to hear more about the role, the team and wider directorate and the department. It will also be an opportunity for you to ask any questions. Please register your interest by filling out this Registration form and you will be sent an invitation. Invites will only be sent after this deadline has passed.

Please note that the session will not be recorded and will not focus on the DCMS recruitment process - please direct any queries that you have on this topic (timelines, reasonable adjustments, onboarding etc) to [email removed]

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Managing a Quality Service

Technical skills

We'll assess you against these technical skills during the selection process:

• Information risk assessment and risk management
• Risk understanding and mitigation

Benefits

Alongside your salary of £64,903, Department for Culture, Media and Sport contributes £18,802 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

DCMS values its staff and offers a wide range of benefits to everyone who works here. We’re committed to developing talent, and supporting colleagues to have great careers in our department. To support with that, some of the benefits we offer include:

• Flexible working arrangements and hybrid working - DCMS staff work on a flexible basis with time spent in offices, and time spent working from home

• 26.5 days annual leave on entry, increasing to 31.5 days after 5 years’ service

• A Civil Service pension with an employer contribution of 28.97%

• Access to the Edenred employee benefits system which offers discounts to popular retailers and access to various useful resources such as financial and savings advice

• 3 days of paid volunteering leave

• Up to 9 months maternity leave on full pay + generous paternity and adoption leave

• Staff reward and recognition bonuses that operate throughout the year

• Occupational sick pay

• Access to the Employee Assistance Programme which offers staff 24/7 confidential support and resources such as counselling, debt guidance and management advice

• Active and engaged staff networks to join including the LGBT+, Ethnic Diversity, Mental Health and Wellbeing and Gender Equality Networks

• Exceptional learning and development opportunities that you can explore alongside your day to day work

• Season ticket loan, cycle to work scheme and much more!

Terms and conditions at SCS grades will vary. Those applying for SCS roles should refer to the candidate information pack for more information on terms and conditions.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guid