Head of Risk and Control

Telford, Salford, Newcastle, Edinburgh, Bristol, London.

Job summary

Enterprise security risk management (ESRM) is key to enabling HMRC to deliver secure operations, with lines of business owning and actively managing security risk. 

Your team are an integral part of ESRM, setting the security controls, including security policies, that HMRC should adopt, assessing what this means for security risk across the enterprise and ensuring we scan future developments and threats to adapt and leverage our security controls.

This role will have a pivotal part to play in developing and embedding security risk management in the business, as well as 

Assessing the aggregation of risk across the whole organisation through the tier 2 and tier 1 security risk domains.  You will own ESRM messaging, working across the organisation to improve the security risk management culture within HMRC. 

ESRM is part of the work of The Security Operating Model (SOM) which is changing how security is delivered.  The risk and controls team is a cornerstone in HMRC Security.  Your support of the SOM will present opportunities for efficiencies and scalability, as well as seeking to improve and mature the operation of ESRM.

At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve.   

We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you.  

Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. 

See what it’s like to work at HMRC: find out more about us or ask our colleagues a question. Questions relating to an individual application must be emailed as detailed later in this advert.

Job description

The enterprise security risk and controls teams sit within the Governance, Risk and Compliance team in HMRC Security.

The team is responsible for owning and managing the enterprise level security risks at tier 1 and tier 2, setting and assessing the departmental security risk appetite and tolerance and defining the associated security controls, including the security policies and standards.

You will manage and support the security policy team and use insights from the risk team and data to assess the performance of HMRC security policies.  You and your team shall identify areas for compliance activity and policy review where deficiencies or a changing landscape means these are no longer fit for purpose.  Through your leadership, the team will support the adoption of and compliance with HMRC security policy through a range of avenues including the commissioning of education and awareness, reporting and governance channels.

You will own the development and adoption of a clear methodology to measure and report HMRC performance against enterprise security controls and risk.  You will call out to the HMRC senior leadership team areas of deficiency and practices that impact the improvement of the HMRC security risk posture.  You will take action proportionately, having the ability to balance business need with operating in a secure enough environment.

You will line manage the team directly involved in this work and take responsibility for several key reporting actions in the strategic risk process, this includes input to senior briefing including Audit and Risk Committee and Excom as well as ensuing policy reviews are scheduled and completed timeously. 

You and your team focus on priority risk and controls. Your skill in adeptly assessing priorities enables you to often make difficult decisions on where to focus your resource.  You’ll be responsible for the reporting and assessment of the HMRC security position, which includes measuring risk appetite and tolerance levels.

You always direct your teams to provide timeous reporting and flag risks before they become issues.  You provide support to your team to work holistically, providing a global picture of security risk for HMRC.

You clearly give direction to the enterprise security risk and controls team, ensuring that they are not only focused on current risk exposure, but horizon scanning and managing new environmental, technological and security threat data to support HMRC to manage and be prepared for any changes in the security landscape.

This role is pivotal in ensuring that security controls are measured, proportionate and effective.  This must be aligned to the central HMRC risk and controls frameworks, directed centrally.  You and your team develop and maintain good working relationships with a wide variety of teams across the organisation.

Person specification

Essential criteria

The successful candidate must have a deep understanding of the risk and controls landscape.

The successful candidate must have an appreciation for the concept of enterprise security risk.

This role supports senior level reporting and will work closely with the Deputy Director and their broader team to set the context and direction for enterprise security.  You must be a strong communicator, with the ability to transform complex and sometimes technical content into a simple and impactful narrative.

You must be able to work collaboratively across teams, acting as a critical friend and a challenge function out into HMRC to embed and improve the adoption and performance of security controls to mitigate risk.

Desirable criteria

Knowledge of security risk and controls and how they support secure operations would be advantageous.

Experience in drafting, testing, and evaluating policy.

Experience of drafting and reporting to senior stakeholders and taking ownership of challenging messages to those stakeholders.

You should be an engaging leader and able to take your team with you, particularly through the change journey.

You should be adept at both using governance and networks to achieve outcomes.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Seeing the Big Picture
  • Communicating and Influencing
Alongside your salary of £64,693, HM Revenue and Customs contributes £17,467 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Civil Service pension with an average employer contribution of 27%

Find more about HMRC benefits in ‘Your little extras and big benefits handbook’ for further information or visit Thinking of joining the Civil Service.

Security Governance Analyst (Ref: 76234)

East Midlands (England), East of England, London (region), North East England, North West England, Scotland, South East England, South West England, Wales, West Midlands (England), Yorkshire and the Humber

Job summary

Please refer to Job Description

Job description

We encourage applications from people from all backgrounds and aim to have a workforce that represents the wider society that we serve. We pride ourselves on being an employer of choice. We champion diversity, inclusion and wellbeing and aim to create a workplace where everyone feels valued and a sense of belonging. To find out more about how we do this visit: https://www.gov.uk/government/organisations/ministry-of-justice/about/equality-and-diversity.

Job Title / Group / Directorate

Security Governance Analyst, Security Information Group, Chief Operating Officer Group.

Reports To

Security Function and Reporting Analyst, MoJ Group Security, Governance Team.

Location & Terms of appointment

This is a permanent post based Nationally.

Salary and Grade

This post is band EO (Executive Officer)

New entrants to the Civil Service will be expected to join on the minimum of the pay range. Existing Civil Servants will have their salary calculated in accordance with the Department’s pay on transfer / pay on promotion rules.

Background

The role of MoJ Group Security is to protect people and assets from damage or harm, drive successful change through delivery of strategic objectives and ensure good governance principles and practices are applied to achieve successful daily operations. Its key objectives are to:

  • Ensure government personnel and physical security shared services address departmental security needs.
  • Seek to raise standards for personnel and physical security in line with the Government Functional Standards.
  • Ensure the department is aligned with and influencing the Cabinet Office Vetting Modernisation Programme.
  • Provide structure and processes for effective decision making, accountability and influencing how objectives are achieved. Ensuring risk is monitored and addressed and performance optimised.
  • Foster effective communication and collaboration and the sharing of best practice, ensuring consistency of approach and standards.
  • Provide expertise on protective security and governance to improve the business of our customers, creating better and safer outcomes for both our customers and department.

The Governance team within MoJ Group Security ensures a proportionate and risk managed approach to security to enable government business to operate effectively, safely, and securely. It provides confidence to senior leaders and stakeholders of secure and successful delivery of security standards and ensures compliance with mandated cross-government assurance activities, as coordinated by the Cabinet Office.

Role Purpose

The Governance team within MoJ Group Security is looking to recruit an Executive Officer to provide specialist administrative support, advice, and guidance to the Governance Team.

The post holder will be responsible for investigating and reporting upon security incidents including ensuring that reporting packs and incident logs are updated and maintained, and any actions / lessons learned are addressed. As well as incident reporting, the team deliver the Departmental Security Health Check, so the role is key in administering the security improvement plan and reporting on security risks to help provide a specialist service to the whole of MoJ.

The role is also about being a team player in the field of security within MoJ HQ by providing support to the line manager and the wider team.  This includes supporting the Information Risk and Security Board on an eight weekly basis to seek assurances that the Senior Responsible Owners and Subject Matter Experts across HQ and the Executive Agencies are implementing departmental security and information policies and managing associated risks. 

The role also includes risk reporting on broader security issues, risk, and other administrative topics. 

Main Activities/Responsibilities

Provide administrative support for the MoJ Information Security Risk (ISR) Board by drafting agendas, creating, and collating papers, and managing the actions log.

Ensure the monthly reporting packs and incident logs are updated and maintained, and any actions / lessons learned are identified and acted upon.

Provide administrative support on Group Security corporate issues to optimize the running of the team, helping to maintain effective security governance for the benefit of the Chief Security Officer.  This will include the maintenance of the Business Continuity programme and other overarching pieces of work.

Collaborate effectively with other teams throughout the Ministry of Justice HQ, Executive Agencies and ALBs, building relationships which aim to embed the reputation and performance of the security teams across the wider Ministry of Justice.

Assist in developing and maintaining comprehensive and up-to-date electronic filing systems that support the delivery of services and are effective in storing and retrieving data, ensuring access and structure are appropriately managed.

Provide support to the line manager on a variety of ad hoc tasks, including responding (sometimes at short notice) to emerging security matters and administration.

Knowledge, Skills, and Behaviours

Experience of and a high-level of competence in, administrative tasks gained through working in an office-based or other relevant environment (private/public sector).

Experience of stakeholder management and customer service provision.

An understanding of the principles of data protection and a strong commitment to confidentiality and discretion when handling sensitive personal or organisational data.

A high level of competence with MS Office 365 products, including MS Word and MS Excel.

A proven ability to deliver an “at volume” service consistently and at pace, whilst adhering to service and policy standards.

Desirable

Qualifications and/or experience in Power BI and Power Automate.

Application Process

The application will assess you on behaviours. Behaviours are the actions and activities that people do which result in effective performance in a job. The Civil Service has defined a set of behaviours that, when demonstrated, are associated with job success. Civil Service Behaviours are specific to the grade level of the job role. The examples of the behaviours are designed to give an overview of what is expected of individuals at each level. There is no expectation that all individuals will need to demonstrate every part of each example to be successful.

To apply for this position please complete the online application form, ensuring you submit the following two application documents:

An up-to-date copy of your CV which details your experience and achievements

A 250-word suitability statement against each of the following Success Profile Behaviours (Level 2):

  • Making Effective Decisions
  • Working Together

Dependent on volumes of applications received the sift stage may be based on the lead behaviour, which is Making Effective Decisions. 

If selected for interview, along with being assessed against the Success Profile behaviours above you will also be tested against the following (to Level 2):

  • Changing and Improving
  • Working Together
  • Managing a Quality Service

Strengths will also be assessed at interview, but these are not shared in advance.  Please also note that interviews will be conducted via video conference.

Further information on Success Profiles and the required standards for this post (Level 2) can be found at: https://www.gov.uk/government/publications/success-profiles

A Merit List of applicants meeting the required criteria may be kept for up to 12 months.

Person specification

Please refer to Job Description

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Changing and Improving
  • Making Effective Decisions
  • Working Together
  • Managing a Quality Service
  • Access to learning and development
  • A working environment that supports a range of flexible working options to enhance your work life balance
  • A working culture which encourages inclusion and diversity
  • Civil Service pension with an average employer contribution of 27%
  • Annual Leave
  • Public Holidays
  • Season Ticket Advance

For more information about the recruitment process, benefits and allowances and answers to general queries, please click the below link which will direct you to our Candidate Information Page.

Link: https://justicejobs.tal.net/vx/candidate/cms/About%20the%20MOJ

Futures Officer

Multi-location from one of our FSA Offices (Belfast, Cardiff or York), or home based in the UK. Please be aware that this role can only be worked within the UK and not overseas. Travel across the UK will be required on an occasional basis, possibly with overnight stays.

Job summary

Do you enjoy developing strong working relationships?

Do you thrive on delivering projects to meet timescale and quality requirements?

Are you looking for a new challenge in an organisation that makes a real difference to everyone?

If the answer is yes – the Food Standards Agency (FSA) has an exciting opportunity for you as a Futures Officer in the National Food Crime Unit (NFCU), building our resilience and capability to ensure that we are in a position to deliver our best work for years to come.

The FSA is a non-ministerial department of over 1300 people. We play a critical role in protecting public health and consumers’ wider interests in food across England, Wales and Northern Ireland. Our vision is an important one – to drive change, delivering “food we can trust” and working towards a healthier and more sustainable food system.

Our National Food Crime Unit (NFCU) plays a vital role in keeping food safe across the UK. Disrupting and deterring those who commit food crimes, their work is a major part of ensuring that the food on our tables is exactly what it says it is. The NFCU faces many challenges as it seeks to carry out its remit, and these challenges are always evolving as threats develop to take advantage of new technology, or our changing food landscapes.

Job description

Working as one of our Futures team, you’ll have the opportunity to help us prepare for these unique challenges. Engaging with projects that seek to examine what the NFCU will come up against and build organisational capabilities to address the threats, helping to develop new processes and optimise approaches that will support our needs.

You’ll have experience in delivering operational outcomes across a range of timeframes and will be able to balance competing priorities to ensure that we can effectively build the NFCU in a way that will keep food safe in the face of an ever-changing food landscape.

If you are excited by the idea of working collaboratively with our fantastic team to make a lasting impact on the food eaten across the country and understand what it takes to deliver effective change that will make the difference necessary, apply today and help us in our mission to keep food safe and ensure that it is what it says it is.

Person specification

Please read the attached Candidate Pack to discover further details about the role, our organisation, who we are looking for and the criteria we will assess against during the selection process.

We look forward to receiving your application and wish you every success.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Seeing the Big Picture
  • Changing and Improving
  • Communicating and Influencing
  • Delivering at Pace
Alongside your salary of £30,957, Food Standards Agency contributes £7,311 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
Our candidate pack details the benefits that the FSA has to offer. Please also refer to the attached Terms and Conditions statement.

DDaT – Home Office Cyber Security – Trainee Cyber Security Risk Manager

Manchester Soapworks

Job summary

A trainee Cyber Security Risk Manager supports an established team of risk managers across Home Office Cyber Security (HOCS) to identify, understand and mitigate cyber-related risks. They identify and evaluate security risks to information, systems and processes owned by the organisation, and proactively provide appropriate advice, drawing on a wide variety of sources, to stakeholders across the organisation and at a variety of levels. They provide risk or service owners with advice to help them make well informed risk-based decisions.

You will receive coaching, mentoring and direction from more senior team members.

The role is a trainee position where you can broaden you technical understanding and skills and start developing a specialisation.

The role is a pilot trainee position and will sit within the profession management team. You will be supported by numerous teams across Cyber Security to learn whilst on the job, where you can broaden your technical understanding and skills and start developing a specialisation. You will work under close supervision and can expect to benefit from training (formal and informal), coaching and mentoring to help you develop towards a permanent career in Cyber Security Risk Management.

We are offering 1 role in Manchester/Croydon. All roles will be appointed on merit order and location preference will be considered but not guaranteed.

Job description

Your main day to day responsibilities will be:

• Assisting in the planning and implementation of organisation-wide processes and procedures for the management of risk to the success or integrity of the business, especially those arising from the use of information technology, reduction or non-availability of energy supply or inappropriate disposal of materials, hardware or data. Working with the team to monitor the efficiency and effectiveness of the risk management processes across the organisation and help make recommendations for continuous improvement.

• Collaborate to conduct reviews and risk assessments when necessary and help feedback findings to the relevant parties. Contribute to communicating risk assessment outcomes to stakeholders in ways that support effective security, risk management and decision-making, and advise stakeholders on their approach to risk assessment in the context of their business outcomes

• Work within established security and risk management governance structures, under supervision to support, review and undertake straightforward risk management activities such as: helping with the analysis and derivation of business-supporting security needs; undertaking cyber security related risk assessments; basic threat assessments and other risk management activities

• Interpret and contribute to the development of risk management-related policy and assure the ongoing appropriateness of policy in accordance with regulation and wider departmental and government policies. Have some understanding of the applicability of appropriate regulations.

• Help to provide advice to address identified cyber security related risks by applying of a variety of security capabilities. Provide straightforward advice to validate the effectiveness of risk mitigation measures, including some understanding of how to use different assurance activities (such as a pen test) and make recommendations for improvement

• Help to advise risk or service owners to make decisions that are well informed by good and clear security advice, including making some contribution to reports or working within established reporting chains in a security team

Note: An employee may be required to carry out other duties within the scope of the grade and within the limits of their skill, competence and training.

Due to the nature of this role/business needs, this post is available on full-time and flexible working only but not on part time basis.

Hybrid Working

Hybrid working enables employees to work partly in their workplace(s) and partly at home.  A hybrid working pattern may be available, where business needs allow. Applicants can discuss what this means with the vacancy holder if they have specific questions.  Some occasional travel will be required.

Person specification

You will also be expected to carry out the following day to day activities:

• Help to identify process optimisation opportunities and work on the implementation of proposed solutions

• Driving the collection of statistical information relating to systems security incidents and identified vulnerabilities to produce reports for senior stakeholders

• Working with members of the team to ensure that everyone is up to speed with Home Office and security principles and developing in line with Home Office values

• Working closely with other Home Office Cyber Security (HOCS) personnel to ensure that specialist knowledge is kept current

• Assist with providing ad hoc support to IT teams by answering general enquiries about information security requirements

• Participating, contributing to, and supporting collaboration initiatives and career development within the community, building in-house capability via the professional community of practice

• Supporting reviews of security policy documentation, including procedures, processes and security notices, to ensure that requirements from governance, such as the System Security Document are reflected

• Helping to plan and deliver internal security audits, assisting with analysing audit data in order to help make recommendations on how we can ensure information conforms to processes, procedures and regulations

• Communicating effectively with relevant teams and stakeholders regarding the importance of security considerations and respond accordingly to changes in policy and procedure

• Supporting the review of internal controls following any security breach, helping to provide advice on how to remediate any vulnerabilities discovered.

• Working with the team on remedial solutions and helping to ensure resolution activities are carried out through liaising with the appropriate stakeholders

• Working with technical teams to audit the continuous monitoring of designated systems and networks and the recording of security events and incidents to highlight system and network errors and support investigations

• Ensure all identified risks are managed in accordance with Home Office risk management policies.

Note: The post-holder may be required to carry out other duties within the scope of the grade and within the limits of their skill, competence and training.

Skills and experience

Essential criteria

You’ll have a passion for Cyber Security. Please see below some of the relevant skills required for this role which you may want to address in your application:

• Communication

• Problem-solving

• Time management

• Critical thinking

• Decision-making

• Adaptability

• Conflict management

• Leadership

• Resourcefulness

• Motivation

• Collaboration

• Flexibility

• Willingness to learn

• Resilience

Desirable criteria

Ideally you will also have some experience and/or awareness of:

• Risk management

• Audit and audit tools

• Understanding of Lean, Agile and DevOps principles within a Product-centric delivery model

• Currently enrolled onto a Level 6 apprenticeship scheme

• Currently enrolled onto a Cyber Level 6 apprenticeship scheme

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Communicating and Influencing
  • Changing and Improving
  • Delivering at Pace

Technical skills

We’ll assess you against these technical skills during the selection process:

  • Cyber Policy
Alongside your salary of £32,000, Home Office contributes £8,640 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Civil Service pension with an average employer contribution of 27%

Border Force – Joint Maritime Security Centre – Strategic Analyst

Portsmouth – National Maritime Information Centre

Job summary

Border Force is a Law Enforcement arm of the Home Office. We are responsible for handling the UK border control by implementing immigration and customs regulations and working with the wider Home Office on counter terrorism, organised crime, modern slavery and trafficking. Learn more on the Border Force careers page.

Job description

The Joint Maritime Security Centre (JMSC) is the UK’s cross government organisation for maritime security. JMSC provides expert advice and support to government (including the Devolved Administrations and Crown Dependencies) on maritime security, including maritime related threat, operational and response mechanisms.

JMSC comprises operational and intelligence/information elements. The Operations Centre provides 24/7 awareness of the UK’s maritime asset distribution and ensures a coordinated and whole-system response to maritime security incidents at sea. It contributes to the integrity of UK waters and the mitigation of threats at sea by informing operational decision making. On behalf of government, The JMSC Operations Centre also owns multi-agency CONOPs and delivers a joint exercising calendar. Watchkeepers are a key element of this team. The National Maritime Information Centre is the multi-agency construct that enables joint operational activity, information sharing, and collaboration at the operational and tactical levels.

The new JMSC Assessment capability will produce global strategic maritime security assessments to inform UK government and other stakeholders of threats within or emanating from the maritime domain. Activity will normally be commissioned and prioritised by the National Maritime Security Committee (Officials) (NMSC(O). Professional standards will be compliant with the Cabinet Office Professional Head of Intelligence Assessment (PHIA).

JMSC is led by Head JMSC who is organisationally accountable to the Joint Governance Board (JGB), comprising sponsors from the Home Office, Department for Trade and Ministry of Defence.

As an intelligence analyst within the JMSC Assessment team, the post holder will report to and take direction from their respective Lead Analyst to fuse intelligence and information to produce global maritime security threat analysis and understanding in accordance with JMSC strategic and operational priorities. They will also have responsibility for one or two thematic threat areas.

This work is at the cutting-edge of delivering cross-government maritime security threat assessments in support of delivering the JMSC Mandate.  It offers a challenging opportunity to join a collaborative intelligence community and participate in developing and delivering Government-facing, consolidated maritime security threat understanding.  Analysts will be able to collate and cohere threat understanding from across the national and international intelligence communities, contributing to the development of assessments to inform decision-making at all levels. The primary output ultimately supports the  NMSC(O) in delivering the UK’s National Strategy for Maritime Security.

Responsibilities

Duties include but are not limited to:

  • Drafting high-quality, global maritime threat assessments and presentations to satisfy standing and ad hoc intelligence requirements.
  • Maintaining and building enduring linkages with national and international intelligence counterparts, to understand threats in a designated geographic region.
  • Building an exhaustive knowledge and understanding of all threat vectors within a designated geographic region.
  • Understanding, articulating, and helping drive forward JMSC Assessment output, and in turn, supporting wider business to deliver the JMSC Mandate.
  • Providing strong support to their Lead Analyst regarding a specific area of analytical responsibility, including day to day and urgent, high profile or sensitive issues;
  • Proactively taking responsibility for engaging, delivering outcomes and resolving issues.
  • Providing high quality, succinct, timely and accurate, advice and briefings.
  • Maintaining an overview of issues affecting wider JMSC Assessment activity.

Candidates to Note:

  • Flexible or part time working will be considered but not all work patterns can be supported due to the business critical nature of this role.  Prospective candidates should discuss work patterns (for more details see further information).
  • Post holders are expected to successfully obtain developed Vetting (DV) level clearance as part of the Pre Employment Checks, if not already held, prior to starting in their post

Person specification

We are looking for someone who:

  • Is a self-starter who can work effectively under pressure, taking responsibility for delivery, and works collaboratively with others to achieve the JMSC’s objectives.
  • Must be able to build effective stakeholder relationships
  • Has strong communication skills.
  • Is able to prioritise work.
  • Has a keen interest in expanding knowledge and keep up to date with global affairs

Essential Criteria

The successful candidate must be able to demonstrate:

  • Have previously applied analytical skills independently to complex work, with an element of supervision.
  • Be able to exercise judgement in selecting the best approach to achieve the task while meeting existing standards and procedures.
  • Be able to tailor your approach to best meet deadlines.
  • Demonstrate how your work and the work of your team can assist and inform organisational objectives and the wider understanding of potential threats
  • Ability to develop strong stakeholder relationships, both domestically and internationally with a view to building enduring and collaborative analytical partnerships
  • Use creative and critical thinking in analysis and research to support assessments, applying structured methods to explain how verdicts have been reached.
  • Articulate thought processes and complex matters concisely, visually, verbally and in writing.
  • Must hold a minimum of SC clearance and be willing to obtain DV clearance once in post.

Desirable Criteria 

  • An ability to routinely review effort and outputs, taking the initiative to appropriately challenge and suggest improvements.
  • Understand your areas of responsibility and display awareness of the wider impact of your actions.
  • Completion of Professional Head of Intelligence Assessment’s (PHIA) new analyst training (or its predecessors) or equivalent.

Note:  These are desirable criteria and the absence of experience in one or more of these areas should not be a barrier for strong candidates.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Managing a Quality Service
  • Communicating and Influencing
  • Delivering at Pace
  • Making Effective Decisions

We only ask for evidence of these behaviours on your application form:

  • Managing a Quality Service
Alongside your salary of £32,000, Home Office contributes £8,640 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Civil Service pension with an average employer contribution of 27%

Government Cyber Security Strategy (GCSS): Deputy Programme Manager (2/2)

London

Job summary

Business Unit Information 

The Government Security Function (GSF) oversees the delivery of protective security across Government. Our Mission is to enable Government to protect citizens and provide vital public services by understanding and managing security risks. We set the strategy and standards for Government Security, monitor departmental security performance, manage pan-government security incidents, support the delivery of key security capabilities and lead the Government Security Profession.

The Government Security Group (GSG) is the centre of the Security Function, based within the Cabinet Office. GSG is transforming the Government’s approach to protective security to ensure it is fit to meet the challenges of the digital age. This role offers an exciting opportunity to work in a fast-paced, dynamic team, with a breadth of stakeholders including in other Government departments, the National Technical Authorities and the Agencies, and to contribute to delivering improved security across Government.

Job description

To support the mission of the Government Security Function, in January 2022 we published the Government Cyber Security Strategy. This sets out how we will improve the cyber security of the Government up to 2030. To support the implementation of this strategy, the Cyber Directorate has established a Programme Management Office responsible for overseeing, coordinating and supporting all of the ongoing work across Government.

These roles will support the Programme Manager and lead the two branches of the PMO. The first branch of the PMO is the reporting team. This team is the eye and ears of the PMO and is responsible for maintaining an overview of the current progress and risks within the programme. This role focuses on maintaining a clear picture of our delivery partners progress on delivering the strategy and clearly communicating this to seniors when required. You should be the first person to notice when something is going wrong, triage the problem and work with teams to ensure they are being resolved. 

The second branch of the PMO is the enabling function of the team. The role of managing this team is all about making our Programme more effective and runs in two main parts. Primarily this is a hub for specialist project management resources that projects can’t have locally.This means specialist skills that projects don’t need full time, such as business case development, can be provided to projects while functions like stakeholder management can be managed at programme level on behalf of the project team. Secondly, the successful candidate will be responsible for managing any thematic risks that are identified through reporting and fall within the remit of the PMO. 

For both roles we are looking for candidates with a solid foundation in project management. We expect that the successful candidates will be able to provide support and cross cover between the two roles when it is required. 

Key areas of responsibility

The post holders will be responsible for:

  • Team Leadership – Coordinating the activities of the team, including ensuring that the work is appropriately prioritised.
  • Communications and stakeholder management – Identifying and managing stakeholder relationships. Managing internal and external relationships as appropriate by developing the communications strategy for the programme.
  • Business case support – To provide expert advice on developing business cases to project leads and SMEs.
  • Guidance – To provide direction and guidance on development to the PMO and more broadly across the program.
  • Risks and issues – Ensuring mitigation’s for cross cutting risks are in place and resolved through negotiated agreement.
  • Dependency management – Working with project leads and business as usual to ensure dependencies are actively managed, act as an arbiter and enforcer and resolve issues between the various elements of the programme.
  • Programme performance and controls – Maintaining overall integrity and coherence of programme and governance framework to support each project. Plan programme assurance activities.

Person specification

Essential skills and experience:

This role is aligned to the G7 Programme manager role in the IPA’s project delivery capability framework. The definition of Working level and Practitioner are contained in that framework along with more detailed definitions of the requirements below below. 

  • Planning – Practitioner level.
  • Stakeholder engagement – Practitioner level. 
  • Risk and issue management – Practitioner level. 
  • Influencing – Practitioner level. 
  • An appropriate project management qualification such as: Managing Successful Programmes Practitioner, PRINCE2 Practitioner, Managing Successful Programmes Advanced Practitioner, APM Project Management Qualification, APM Chartered Project Professional, Project Leadership Programme, Leading and Managing Project Workstreams or equivalent. 

Desirable skills and experience:

  • Collaboration – Practitioner level. 
  • Conflict resolution – Working level.
  • Inspiring others – Working level.
  • Commercial and procurement skills – Working level.
  • Working with ambiguity – Working level.
  • Business case development – Working level.

Licences

Must hold a valid SC or be willing and eligible to undergo one.

Qualifications

An appropriate project management qualification such as: Managing Successful Programmes Practitioner, PRINCE2 Practitioner, Managing Successful Programmes Advanced Practitioner, APM Project Management Qualification, APM Chartered Project Professional, Project Leadership Programme, Leading and Managing Project Workstreams or equivalent.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Changing and Improving
  • Communicating and Influencing
  • Working Together

We only ask for evidence of these behaviours on your application form:

  • Changing and Improving
  • Communicating and Influencing
Alongside your salary of £50,694, Cabinet Office contributes £13,687 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role.
  • An environment with flexible working options.
  • A culture encouraging inclusion and diversity.
  • Civil Service Pension which provides an attractive pension, benefits for dependants and average employer contributions of 27%.
  • A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.

Deputy Head of Cyber Security – DID2323

National with regular travel

Job summary

Digital and Information Directorate (DID) brings together professional experts in digital technology, security, information management and operational process transformation to deliver high quality services to the CPS.

We look to build positive partnerships across the CJS, and with our wider government colleagues, to implement innovative ways of working, reduce corporate risk, improve user experience, and enable colleagues to successfully deliver their business.

The Security and Information Assurance Division (SIAD) consists of a number of separate, but interlinked, teams within DID who provide holistic advice and guidance on all aspects of security and information assurance to the organisation. The Division is made up of:

  •   Operational Security Team (OST)
  •   Records Management Team (RMT)
  •   Data Protection Compliance Team (DPCT)
  •   Information Access Team (IAT)
  •   Change and Engagement (CE)
  •   Information Management and Architecture Team (IMAT)
  •   Cyber Security Team (CST)

The Deputy Head of Cyber Security posts will be leading key projects / programmes and, together, with the Level E lead CST. The Deputy Head posts will also lead team members and provide specialist advice on cyber risk management and day to day operations as well as strategy and policy.

The CST is responsible for cyber security incident management, engagement with suppliers and other Government Departments to ensure the delivery and development of an appropriately secure ICT network and other digital services.

Job description

The role of Deputy Head of Cyber Security is to assist the Head of the Cyber Team in providing strategic leadership and direction for cybersecurity-related activities within the Crown Prosecution Service. The role will work closely with the Head to develop and implement cybersecurity strategies, policies, and initiatives that align with the CPS’s goals and priorities.

The Deputy Head may oversee the day-to-day operations of the Cyber Team, including managing resources, coordinating tasks, and ensuring the effective implementation of cybersecurity measures. They work to enhance the CPS’s cyber defense capabilities, identify potential vulnerabilities, and establish incident response protocols.

This role is key to ensuring that CPS retains its position at the forefront of CJS IT by making sensible and sustainable information assurance decisions within this more complex environment. Decisions can have a critical impact on organisational effectiveness or the external reputation of the organisation.

Who are we looking for?

  • A visible leader and confident manager.
  • An effective communicator across all levels of our business, Other Government Departments and with our suppliers.
  • An experienced cyber security professional capable of leading the development / implementation of cyber security policies and workstreams. Your expertise will be supported by ‘real world’ experience and enable you to negotiate, persuade and coach effectively – establishing credibility and trust with senior stakeholders.
  • An effective decision maker; someone who can assimilate knowledge quickly and promptly decide on next steps during a cyber security incident.
  • A capable planner whose project management skills enable them to design clear, pragmatic and achievable plans.

Person specification

The Deputy Head of Cyber Security will lead on various cyber security workstreams the for the CPS. The roles will have a specific focus on delivering on the objectives and outcomes within the CPS’ cyber security strategy and will be responsible for ensuring that the strategies deliverables are met, and feed this back through the governance and reporting structures.

  • Leading work to understand the CPS cyber security and resilience risk to ensure the effectiveness of proposed mitigations against the evolving cyber threat.
  • The ability to build and maintain relationships across a stakeholder network, and to operate across Whitehall to deliver the CPS’ and government’s priorities will be a key objective.
  • Engage with key suppliers and third parties and building and maintaining strong relationships with other government departments.
  • Deputy Head will support the Head of Cyber with the implementation of a strategy on Cyber Operations and Cyber Incident Response.
  • Line management of the Cyber Security Team members to ensure workloads are balanced efficiently and that personnel are given sufficient career development programmes.
  • The role will also be responsible for our cyber security awareness and education program, with the objective of reducing the risk to our organisation.
  • Prepare and present briefing papers that ensures the CPS Senior Leadership Team / Board are appropriately aware of cyber security risks and support the measures in place to mitigate these risks.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Communicating and Influencing
  • Leadership
  • Managing a Quality Service
  • Making Effective Decisions
  • Seeing the Big Picture

We only ask for evidence of these behaviours on your application form:

  • Communicating and Influencing
  • Leadership
  • Managing a Quality Service
Alongside your salary of £51,870, Crown Prosecution Service contributes £14,004 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Join the Crown Prosecution Service (CPS) and have a future that matters: Find Your Purpose

CPS is passionate about ensuring that we are a top performing organisation and a great place to work. We are committed to be an equal opportunities employer and creating a culture where everyone can bring their whole self to work and individuality is truly appreciated.

We want to ensure all our employees can thrive at work and home and offer a range of support to achieve a balance. This includes where possible, flexibility of working hours, flexibility to support caring responsibilities and a flexible approach to deployment, which means that where you work (i.e. a court, an office, or a remote setting such as your home) will be based on the kind of work you are undertaking.

This culture of inclusion is underpinned by our staff networks covering Disability, Faith and Belief, LGBTQI+, Race, Social Mobility alongside our Mental Health First Aiders Programme and Wellbeing Sessions.

CPS commits to offer its employees the following experience

• Impactful, purposeful work – making a difference to your local communities
• The ability to learn and grow, with access to the right opportunities and resources
• To care about your wellbeing
• To feel valued, trusted and included

We also offer the following range of benefits:

• Civil Service Pension
• Access to employee savings
• Cycle2Work scheme
• 25 days leave, rising to 30 days after 5 years’ service.
• 1 extra privilege day entitlement to mark the King’s Birthday.
• Competitive maternity, paternity and parental leave
• Flexible working and a family friendly approach to work.
• Childcare vouchers unless already registered with the Government Tax Free Childcare Scheme)

Custodian/Security Officer

London

Job summary

The Prime Minister’s Office enables the Prime Minster to deliver the Government’s overall priorities and to communicate the Government’s policies to Parliament, the public and international audiences. From the Policy Unit and Press Office, Switchboard and Custodians, to the Events & Visits team and the world class Private Office support; the diverse Downing Street team draws on varied expertise from across the Civil Service and beyond. The teams come together to deliver excellent service to the Prime Minister while also making No10 a great place to work.

Job description

The Role

As a Custodian Apprentice at the Prime Minister’s Office, you will help to protect our people and assets to make our complex security operation a success. You will work with a team of motivated professionals to provide a reassuring presence, while conducting a range of security duties and responsibilities.

A focus of the role will be to use bespoke security architecture (e.g., CCTV and Access Control systems) to maintain security assurance across our estate. You will also be responsible for processing visitors and vehicles and engaging in incident and emergency response.

Diversity is welcomed in our team and our Custodian Officers come from all walks of life. You do not need any security experience to apply.

Shift patterns and allowance

As a Custodian you will work a 24/7 shift pattern comprising of early, late and night shifts (including bank holidays & weekends). The average working week is 37.5 hours over 5 working days and two rest days. As such the basic pay is enhanced by 36.97% in allowances as of 2023.

Person specification

Key responsibilities and skills;

  • You will have good customer service skills and be keen to learn.
  • You will enjoy working in a team, be calm under pressure and be assertive when giving instructions.
    You will be a confident communicator and take care to write clearly and concisely. With excellent attention to detail, you will compile accurate written logs.
  • Proactive and motivated, you will be an effective time manager with strong administrative and observational skills.
  • As the first person many people meet on entering No10 from staff to VVIP’s, you will have high personal standards, expecting nothing but the best of yourself and others.
  • We will expect you to have some basic IT skills, including the ability to use email and Microsoft Office. Further training can be provided to develop these skills if required.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Making Effective Decisions
  • Communicating and Influencing
  • Working Together
  • Developing Self and Others
Alongside your salary of £25,277, Cabinet Office contributes £6,824 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
• Learning and development tailored to your role.
• A culture encouraging inclusion and diversity.
• A Civil Service Pension which provides an attractive pension, benefits for dependants and average employer contributions of 27%.
• A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.

Defence Digital – Cyber Security Risk Assessor

These positions can be based at either Main Building, London; RAF Wyton, Huntingdon or MOD Corsham, Wiltshire.

Job summary

Allowances: A Recruitment and Retention Allowance (RRA) of up to £9k per annum may be payable with this post.

Location: These positions can be based at either Main Building, London; RAF Wyton, Huntingdon or MOD Corsham, Wiltshire.

Are you ready to work in one of the most interesting cyber security environments and share your experience to support national security?

Interested in projects at the cutting edge of world leading, military technology, such as next-generation fast jet capabilities, unmanned systems, highly secure networks, future warships & military vehicles and ground-breaking sensor technology?

So, who are we?

We are Defence Digital’s Cyber Assessment and Advisory Service (CySAAS) team, within our Cyber Defence and Risk (CyDR) organisation. Consisting of sub teams which assess specialist ICT, communication and weapons systems, we provide assurance, support and advice across the organisation. Our team thrives on curiosity, new ideas and creative thinking, driving a culture of exploring further and influencing wider, making Cyber security a leader in Defence.

CyDR sits at the forefront of cyber security and information technology and is responsible for enabling the provision of specialist assurance and cyber security services across UK Defence, our industry partners, other Government departments and our international allies.

Defence Digital, part of the Ministry of Defence, provides digital and technology services to our Armed Forces and operates at scale, with an annual budget in excess of £2Bn and a diverse team of 2,500 colleagues. Our aim is to make our Armed Forces some of the most technologically advanced in the world.

As a Civil Servant, you’ll have access to our range of excellent benefits, including flexible working, discount schemes, generous leave allowance and a market-leading Civil Service pension.

Our commitment to your development is fundamental and you’ll be able to take advantage of fantastic learning and development opportunities, tailored to your role and beyond. Whilst in post, you’ll be able to gain industry recognised qualifications, such as CISSP or CRISC and we’ll support you throughout the process.

This is a fantastic opportunity to join our team and become part of our exciting future.

This position is advertised at 37 hours per week.

Job description

As a Cyber Security Risk Assessor within the CySAAS team, you will lead a team providing timely, impartial and consistent assurance, assessment and advisory services across Defence.

Senior personnel will rely on your expertise to ensure they have an accurate understanding of through-life cyber security risks, so they can make informed business decisions. You will work with projects that involve complex technical and security challenges, which may include highly sensitive networks, cryptography and next-generation military vehicles and weapons systems.

Along the way, you will strengthen links with other cyber security bodies and business functions – from business delivery partners who provide project-based assurance activities, to industry trade bodies and organisations which deliver Information Technology (IT).

As an experienced cyber security leader, you will bring to the role a proven ability to communicate at all levels of a diverse organisation. As thought leadership will be a key aspect of the role, you will need to demonstrate a talent for solving complex problems through innovation. You will have the ability to advise on complex risk balance decisions; to explain cyber security policy, governance and technology to non-experts; and to lead a diverse team of skilled cyber security professionals. With you on board, we will develop a culture across UK Defence which values and protects data.

Person specification

Responsibilities:


  • Provision of timely, impartial and consistent accreditation, assessment and advisory services across Defence, to ensure that senior leaders have an accurate understanding of through-life cyber risks and can make informed business decisions.


  • Leadership of cyber security assessment personnel. This may include management of Assessors to ensure:


– Strategic direction for MOD accreditation is on track


– Functional mentoring and professional training and development are achieved


– Accreditation related management information is accurate and up to date


– Workloads are balanced efficiently


  • Ensuring assurance activities are completed in accordance with Government policy, including escalating risks, explained in business terms, to aid the Senior Leader’s decision-making process.


  • Strengthening links with other cyber security bodies and business functions across Defence including:


– Business delivery partners: e.g., Defence Intelligence, Defensive Cyber Operations and Principal Security Advisors


– Business representatives: to help deliver secure IT requirements


– Industry trade bodies: building relationships through encouraging CySAAS attendance at appropriate events


  • Work to develop a pan-Defence culture which values and protects data appropriately. Lead transformation programmes, within your area of responsibility.


  • Promote the benefit of CySAAS outcomes and actively contribute to MOD and Pan Government IA forums, liaising with other Government Accreditation Authorities as appropriate.


  • Support to Deputy Head Cyber Security Assessment, including external reporting requirements.


  • Taking appropriate action as required in response to issues/events e.g., tiger teaming, deep dives.


  • Provision of specialist cyber security services to advise and assist on complex cyber challenges.

Person Specification

If you have the following skills and experience, we would love to hear from you!

Your experience is key and whilst not essential, it may be beneficial to have the following desirable industry qualifications or accreditation and experience or knowledge. Training will be provided for the following, where appropriate:

  • Certified Information Systems Security Professional (CISSP)
  • Certificate in Information Security Management (CISMP)
  • ISO27001
  • Lead auditor
  • Certified Cyber Professional (CCP)
  • Operational Security Management

Dependent on the business need, there may be a requirement to travel to meetings within the UK (or potentially occasional overseas visits).

Allowances: A Recruitment and Retention Allowance (RRA) of up to £9k may be payable with this post, paid in increments upon reaching the required level of competence.

Location: These positions can be based at either Main Building, London; RAF Wyton, Huntingdon or MOD Corsham, Wiltshire.

Work locations will be agreed once the successful candidates have been selected.

This job role may be suitable for hybrid working, which is an informal, non-contractual and voluntary arrangement, blending a balance of attendance in the workplace (your permanent duty station which is based on business assessment of where the work is best done) and working from home as a personal choice (if the role is suitable for this).  If you are successful, any opportunities for hybrid working will be discussed with you prior to you taking up your post.

If not already held, successful candidates will be required to undergo DV clearance. Please note these positions are open to sole UK Nationals only.

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Leadership
  • Seeing the Big Picture
  • Making Effective Decisions
  • Changing and Improving

Technical skills

We’ll assess you against these technical skills during the selection process:

  • Cyber Security Governance and Management
  • Risk Management
Alongside your salary of £54,440, Ministry of Defence contributes £14,698 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
  • Learning and development tailored to your role with a dedicated minimum of 5 days per year
  • Flexible working options
  • 25 days paid annual leave rising (by 1 day per year) to 30 days upon completion of five years’ service
  • Ability to roll up to 10 days annual leave per year
  • In addition to eight public holidays per year, you will also receive leave for HM The King’s birthday
  • Civil Service pension with an average employer contribution of 27%
  • Parental and Adoption Leave
  • Discounts on a range of services within and external to the civil service – Defence Discount Service, Civil Service societies for Sports and Leisure, Healthcare, Insurance, Motoring, Company discounts with Virgin, Vodafone, and Microsoft Office.
  • In year rewards and ‘thank you’ schemes such as vouchers and gift cards
  • A culture encouraging inclusion and diversity
  • Please see Benefits Leaflet for more detail

DD operates an organisation model in which every individual belongs to a Government Profession. The successful applicant will be posted into one of the defined Government Professions on Standard Terms of Reference for the grade. DD reserves the right to move individuals between roles, within their allocated profession, to meet the needs of the business and in support of agile resourcing.

Within DD each profession is led by a Professional Head of Community who will lead professional development and support the Continuous Professional Development path for their group.

DD is currently going through a Transformation Programme which aims to ensure we have the right workforce, with the right skills, to deliver the MOD’s Digital Strategy. As the programme progresses, DD staff may be required to undergo an assessment to understand and develop their upskilling needs to support the delivery of this strategy. This post may be impacted by Transformation.

Equality and Diversity

Our people are at the heart of everything we do at DD. It’s vital that our workforce reflects the diversity of both our audience and the wider society in the UK, so we’re proud to be an equal opportunities employer and we actively seek candidates from diverse backgrounds and communities. We also recognise the importance of a good work life balance, so we do everything we can to accommodate flexible working, including part-time and job shares for all our roles. Please let us know in your application or at any stage throughout the process if this is something you want to explore.


The post does not offer relocation expenses. The post does not offer relocation expenses (move of home, excess fares or temporary transfer)

 External recruits who join the MOD who are new to the Civil Service will be subject to a six month probation period.

Please note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.”

“MOD Recruitment Satisfaction Survey – we may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Notice sets out how we will use your personal data and your rights.

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment by 31st December 2022. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.

 

The Civil Service embraces diversity and promotes equality of opportunity. There is a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

If you need to advise us that you need additional help or reasonable adjustments for the recruitment process, please contact: [email protected]

 

MOD Joint Security Coordination Centre – Incident Analyst

MOD Main Building (London) or RAF Wyton (Huntingdon)

Job summary

Do you want to help safeguard and protect our Armed Forces, personnel, assets, information and National Security? Then your next role may be with us!

The Directorate of Security and Resilience (DSR) mission is to support the delivery of Defence Security outputs by protecting our people, assets and information in the UK and overseas. DSR is responsible for setting resilience and security policy for Defence and provides advice on how to counter and mitigate the key threats and hazards faced by Defence from a wide range of threats including: hostile state actors, terrorist organisations, and serious and organised crime groups.

DSR delivers the MOD’s security policy on the Defence Nuclear Enterprise; culture and training; physical mitigations; personnel and vetting; policing and guarding; resilience and business continuity; and technical and industry. DSR leads the Security Function within Defence and is led by the Chief Security Officer of the MOD, who also acts as the Head of Profession for Security in Defence.

This position is advertised at 37 hours per week.

Job description

The Joint Security Coordination Centre (JSyCC) forms a key part of DSR and aims to provide the Chief Security Officer and other key stakeholders with a range of strategic and tactical analytical products focusing on security incident data. JSyCC is also responsible for coordinating incident response and remediation activity with a range of key MOD stakeholders and technical experts.

JSyCC maintains oversight of all incident reporting and is responsible for the provision of detailed analysis of incident data for a range of key stakeholders including MOD seniors and Ministers and it is likely that your analysis may form part of reports presented at the highest levels in Government.

Joining our team as a JSyCC Security Incident Analyst, you will be conducting initial incident triage involving the most serious security incidents impacting MOD, ensuring that all security incidents are reported in accordance with MOD policy and that the incident data recorded on the Defence Incident Management database is accurate and reflective of the risk/threat to MOD.

You will ensure that any incident data (for the highest priority incidents), used to produce analytical work and management information, is quality assured and reliable and you could find yourself liaising with Defence Intelligence, Ministry of Defence Police and Service Police on a range of critical incidents.

Dependent on the ‘tasking’ and business need, there may be a requirement to travel to meetings within the UK. This post does not offer any assistance with relocation allowances.

The MOD operates an organisational model in which every individual belongs to a Government Profession. The successful applicant will be posted into one of the defined Government Professions on Standard Terms of Reference for the grade. The Directorate of Security and Resilience (DSR) reserves the right to move individuals between roles, within their allocated profession, to meet the needs of the business and in support of agile resourcing.

The day-to-day responsibilities include:

  • Conduct and produce analytical products for MOD customers which cover security incident data. This will typically involve the use of Microsoft Excel/Power BI or other similar data analytics tooling.
  • Respond to and process Ministerial/Parliamentary questions, Freedom of Information Act and Subject Access Requests.
  • Operate, maintain, administer and develop the Defence Incident Management database.
    Conduct initial incident triage of high risk incidents.
  • Monitor progress of incident remediation with Warning, Advice & Reporting Points (WARPs) and hasten accordingly.
  • Monitor all incident communications and update incident records accordingly.
  • Review incident data to identify personnel which may be responsible for multiple security breaches and escalate this accordingly to the relevant team (e.g., Vetting).
  • Act as liaison with respect to security incident referrals from Other Government Departments
    (OGDs), Police or Public/Public bodies.
  • Conduct assurance of incident data when an incident has concluded to ensure data quality &
    integrity.

Person specification

You will need excellent communication skills and the ability to build strong working relationships with a diverse range of internal and external stakeholders.

You will need to be able to extract critical elements from a vast range of reported incident data and quickly identify risks, threats, trends, profiles and vulnerabilities that may impact MOD.

You will ideally have experience of working in an environment where you have a proven ability to triage/assess a variety of security incidents or critical incidents of a similar nature. These may be in any or all of the following security fields; Law Enforcement, Cyber, Physical, Personnel, Information or Technical.

Desirable criteria:

Any analytical qualifications or experience of either tactical or strategic analysis (e.g. GIS, i2, PowerBi).

Behaviours

We’ll assess you against these behaviours during the selection process:

  • Changing and Improving
  • Leadership
  • Working Together

We only ask for evidence of these behaviours on your application form:

  • Changing and Improving
Alongside your salary of £27,080, Ministry of Defence contributes £7,311 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

You will have regular access to learning and development and continuous ‘on the job’ training and events. In addition, you will also be joining a team which has a strong culture for encouraging inclusion and diversity.

DSR also encourages flexible working. This job role may be suitable for hybrid working, which is where an employee works part of the week in their assigned office part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work. The number of days that anyone will be able to work at home will be determined primarily by business need but personal circumstances and other relevant circumstances will also be taken into account. If you are successful, any opportunities for hybrid working, including whether a hybrid working arrangement is suitable for you, will be discussed with you prior to you taking up your post.

  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • Civil Service pension with an average employer contribution of 27%

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment by 31st December 2022. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.

MOD Recruitment Satisfaction Survey – we may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Notice sets out how we will use your personal data and your rights.

Enquire now

The first step in our joining process is to submit your CV. This will be read to determine the appropriate joining route and you will then be sent an email with a link to the relevant application form.

  • Please upload your CV here