Senior Manager - Cyber Security Risk & Assurance

Location: London & Hybrid (60% / 3-days per week in office). The ‘home base’ Met location is Bow. We offer the flexibility to work in a Hybrid way, where you can deliver your best, including Working from Home (WFH). Travel across the Met Estate, to attend meetings as required by the business, is expected.

Policing London is a hugely complex challenge that evolves every day. To make sure the Met is up to the task, we need the right IT and systems across our organisation. As a Senior Manager - Cyber Security Risk & Assurance, you will help to enable us to do our best for the London area. Join us and play your part in making London the safest capital in the world and delivering ‘More Trust, Less Crime and High Standards’.

As a member of the Met, you will also enjoy great benefits including annual leave, civil service pension arrangements, maternity/paternity support, as well as being part of a continuous learning culture.

Digital & Innovation Business Group

The Digital & Innovation Business Group brings together technology, the effective use of data, and our capability to deliver change and reform to drive the Met forward: this is central to progressing delivery of New Met for London 2. It includes the Met’s Transformation, Technology, Data and Analytics functions, as well as work underway to make the organisation more productive and efficient (referred to as Productivity & Efficiency or P&E). The Group was created in early 2026 and is led by Marie Heracleous, Chief Digital & Innovation Officer. It’s an exciting time to be part of D&I, as it builds new capabilities and ways of working to support the frontline and make a real difference to London.

D&I is committed to creating an inclusive working environment. We support hybrid working, and the hiring manager will be happy to discuss arrangements for this role.

Job Purpose

The Cyber Security function within Digital & Innovation (D&I) provides comprehensive security support focusing on (but not exclusive to) threat profiles, quantifying risk, as well as being the custodian for technical security standards and patterns within the Met. It provides information up to the Senior Information Risk Owner (SIRO) on the current state of the Met’s environment and illustrates the threats faced through numerous artefacts.

The Cyber Security Risk & Assurance role plays a vital part in ensuring the security controls and cyber baseline meet the standards, architecture and compliance regimes are in place thus ensuring the Met and associated ecosystem is protected.

Key Role Responsibilities: Cyber Security Strategy

Support the implementation of the Cyber Security Strategy. Work with internal/external stakeholders in providing security assurance against the Cyber Security Annual Plan.

Provide Cyber Security Risk & Assurance

Across the Procurement / Project / Delivery Lifecycle. Assure. IT Health Checks, IRAR’s and other risk related materials. Supplier certifications. Work directly with the Met Security Operations Centre ensuring that cyber controls (e.g. vulnerability management, threat hunting, intelligence) are conducted appropriately and in line with Met contractual requirements.

Develop and Implement Security Policies

Covering Live Met Estate. Patching Regime. Security Monitoring and Reporting. Develop Security Protocols and Procedures.

Review

Met Risk Approach pertaining to Live Estate. Continuous monitoring of supplier provided SOC to ensure they deliver services in line with their contract and develop monitoring to meet Met business requirements.

Operational

Support cyber related incidents as part of a Cyber Security Team 24/7 on-call rota., This post requires access to the most sensitive intelligence material on a daily basis. Applicants must hold or be prepared to undergo National Security Vetting (NSV) Developed Vetting (DV) level before taking up the post., English /generated inline style */ Reports To Band S - Head of Cyber Security Delivery /generated inline style / Additional Information CVF Staff Band.pdf - 971KB Opens in a new window /generated inline style */ Disability Confident Statement

The Met is committed to being an equitable (fair and impartial) and inclusive employer for disabled people, striving to have a diverse and representative workforce at all levels. We encourage applications from people from the widest possible range of backgrounds, cultures and experiences. We particularly welcome applications from people with disabilities and long-term conditions, ethnic minority groups and women.

As a Disability Confident Leader, the Met has committed to making disability equality part of our everyday practice. We ensure that people with disabilities and those with long term conditions have the opportunities to fulfil their potential and realise their aspirations.

The Met is committed to making reasonable adjustments to the recruitment process to ensure disabled applicants can perform at their best. If you need any reasonable adjustments or changes to the application and recruitment process, we ask that you include this information within your application form. All matters will be treated in strict confidence.

Please note, if you are applying for a police officer role or to become a police community support officer (PCSO) or designated detention officer (DDO), there is a minimum requirement that you must pass a job-related fitness test (JRFT) at point of entry. This does not apply to police staff roles. Find out more about police fitness standards.

Applicants who already have awareness and appreciation of the Cyber Security and Risk Analyst roles, in the context of law enforcement are welcomed.

Pulled from the full job description

• Pay rise
• Annual leave
• Company pension
• Work from home, The salary is broken down as £68,112 basic salary, which will increase annually until you reach the top of the scale £72,953. Plus, a location allowance of £2,009 and a non-pensionable allowance of £1,000.