Head of Cyber Governance, Risk and Compliance

Grade: Grade 6 (B1)

Salary: £67,820

Digital Skills Allowance: The base salary for this grade is £67,820. Offers above this will be made up of a Digital Skills Allowance of up to £18,000 per annum for exceptional candidates.

Security: DV – Reserved – Sole UK National

Summary

Addressing cyber risk is a top priority for the MOD. In response to the growing global threat, the Royal Navy (RN) is about to implement a major cyber transformation programme, so this is a great opportunity for strong cyber professionals with excellent communication and influence skills to be part of an exciting and challenging change programme.

The Head of Cyber Governance, Risk and Compliance role is key to identifying, understanding and advising upon the mitigation of RN Cyber Risk. You will oversee the generation and analysis of cyber risk metrics, used to support investment decisions and target security culture education and awareness campaigns.

As a Civil Servant, working in the MOD, you’ll also have access to our range of excellent benefits, including flexible working, great discount schemes, generous leave allowance and a market-leading Civil Service pension.

This post is eligible for a Digital Skills Allowance of up to £18,000 per annum. Eligibility for this allowance will be assessed at interview against 4 core technical skills only and reviewed annually in line with MOD policy.

Job description

In this role, you will provide thought-leadership and insight to enable Navy operations and outputs to be appropriately secure and resilient. You will need to understand Navy’s compliance against standard cyber security frameworks, as defined by MOD. In this role, you’ll engage proactively with stakeholders across Navy Command in the governance of cyber security risk, developing an understanding of compliance levels and ensuring cyber risks are under effective management.

You will lead a team, developing the core skills and expertise, so that they can develop and maintain a wider understanding of cyber risks and capabilities, across RN’s complex and challenging environments.

Responsibilities

Responsibilities will include:

· Own the governance, risk, and compliance (GRC) aspects of cyber security within Navy Command.

· Ensure that a suitable control framework is in place to manage security and technology risks within appetite. Covering areas, including policies & standards, supply chain risk, operational risk, user education and operational resilience / business continuity oversight.

· Act as the subject matter expert regarding security and technology compliance requirements and standards, including NIST and ISO27001.

· Ensure security and risk consultancy is provided to support business activities.

· Share subject matter expertise and support the wider Navy Digital Team and business stakeholders.

· Line management of several direct reports within the team. Resource management across the team, ensuring that the relevant workload is delivered as agreed.

· Carry out cyber security assurance on RN Capabilities and the supply-chain risk.

· Maintain personal skills in the context of technology, GRC, best practices and the strategic direction of Navy Command.

· Support the development of mechanisms to drive continuous improvement and encourage the sharing of best practice.

· Maintain close liaison with key stakeholders across Defence and other government departments, to support wider policy activities.

· Deputise for the Chief Information Security Officer (CISO) when required.

Person specification

This senior leadership role will require excellent communication and influencing skills and experience. In addition, individuals should have relevant skills and experience in at least one of the following areas: information security governance and management, risk assessment and information risk management, technical security architecture, or ICT assurance.

We are committed to encouraging and enabling our staff to develop in and above their role and we will support you in undertaking further learning and development opportunities, within your designated field and beyond. Wherever possible, we will provide upskill learning options and further training to support your continuous professional development.

Desirable qualifications, accreditation, memberships or skills:

· Certificate in Information Security Management Principles (CISMP)

· Certified Information Security Systems Professional (CISSP)

· Certified Cyber Professional (CCP)

· Membership of CIISP, CIISec, BCS or recognised equivalent

Ideally, you’ll have the following:

· The ability to build long term relationships with key internal and external stakeholders.

· Highly effective networking and the ability to advise and influence people.

· Experience of leading and managing a team.

· Ability to communicate effectively to a variety of audiences, synthesising information to portray key messages and facilitate effective decision making.

This post is eligible for a Digital Skills Allowance of up to £18,000 per annum. Eligibility for this allowance will be assessed at interview against 4 core technical skills only and reviewed annually in line with MOD policy.

This job role may be suitable for hybrid working, which is an informal, non-contractual and voluntary arrangement, blending a balance of attendance in the workplace (your permanent duty station, which is based on business assessment of where the work is best done) and working from home as a personal choice (if the role is suitable for this). If you are successful, any opportunities for hybrid working will be discussed with you prior to you taking up your post.

Dependent on the business need, there may be a requirement to travel to meetings within the UK (or potentially occasional overseas visits).

Please note this position is open to sole UK Nationals only.

Qualifications (Essential only)

Security

Successful candidates must meet the security requirements before they can be appointed.

The level of security needed is .

Nationality requirements

Open to UK nationals only.

Selection process details

This vacancy is using Success Profiles and will assess your Behaviours, Experience and Technical skills.

To apply, please complete the CV template provided on the CS Jobs dashboard. The sift will be conducted on your CV, assessed against your relevant skills, knowledge and experience for the role and on your personal statement, assessed against the essential criteria listed below.

All applicants will also need to provide a personal statement (max. 1250 words) and it is essential that this includes evidence of the following essential criteria. Each one will be scored 1-7 and make up part of your overall score to assess your suitability to be invited to interview:

1. Describe your experience of managing cyber security governance, risk and compliance aspects within an organisation.

2. Provide an example of when you have shaped and influenced cyber security strategy, policy or processes.

3. Tell us about your ability to create, build and maintain strong working relationships with both internal and external stakeholders.

4. Describe your experience of leading, managing and developing resources, teams and staff.

Interviews

We’ll assess you against these behaviours, technical skills & experience during the interview process:

Presentation

You will be asked to prepare and deliver a 5-minute (max) presentation on a role-related subject. Further details will be sent prior to interview.

Behaviours

· Changing and Improving

· Leadership

· Communicating & Influencing

Technical Skills

· Information risk assessment and risk management

· Applied security capability

· Protective security

· Threat understanding

The Government Security Profession Career Framework and the Cyber Security Advisory - Risk Manager Principal role used in this vacancy can be found at: Government Security Profession career framework.

Feedback will only be provided if you attend an interview or assessment.

Benefits

This post is eligible for a Digital Skills Allowance of up to £18,000 per annum. Eligibility for this allowance will be assessed at interview against 4 core technical skills only and reviewed annually in line with MOD policy.

Our benefits include:
Learning and development tailored to your role with a dedicated minimum of 5 days per year
25 days paid annual leave rising (by 1 day per year) to 30 days upon completion of five years’ service
Ability to roll up to 10 days annual leave per year
In addition to eight public holidays per year, you will also receive leave for HM The King’s birthday
A Civil Service pension with an average employer contribution of 27%
Parental and Adoption Leave
* Discounts on a range of services within and external to the civil service – Defence Discount Service, Civil Service societies for Sports and Leisure, Healthcare, Insurance, Motoring, Company discounts with Virgin, Vodafone, and Microsoft Office.
* In year rewards and ‘thank you’ schemes such as vouchers and gift cards
* A culture encouraging inclusion and diversity
* Please see Benefits Leaflet for more detail

Equality and Diversity

Our people are at the heart of everything we do at Defence Digital. It’s vital that our workforce reflects the diversity of both our audience and the wider society in the UK, so we’re proud to be an equal opportunities employer and we actively seek candidates from diverse backgrounds and communities. We also recognise the importance of a good work life balance, so we do everything we can to accommodate flexible working, including part-time and job shares for all our roles. Please just let us know in your application or at any stage throughout the process if this is something you want to explore.

Defence Digital operates an organisation model in which every individual belongs to a Government Profession. The successful applicant will be posted into one of the defined Government Professions on Standard Terms of Reference for the grade. Defence Digital reserves the right to move individuals between roles, within their allocated profession, to meet the needs of the business and in support of agile resourcing.

Job Types: Full-time, Permanent

Pay: £67,820.00-£77,870.02 per year

Benefits:
* Company pension
* Flexitime
Schedule:
* Monday to Friday

Work Location: In person