> Markdown version of [/jobs/ext/1475099-senior-manager-cyber-security-risk-assurance](https://www.wearedevelopers.com/jobs/ext/1475099-senior-manager-cyber-security-risk-assurance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Manager - Cyber Security Risk & Assurance - **Company:** Metropolitan Thames Valley - **Location:** London, UK (Remote available) - **Experience:** Expert - **Salary:** £68,112.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Security Support Provider Interface, Software Vulnerability Management, Data Analytics - **Published:** July 29, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=45dcbc34934e9af0 ## About the Role Applicants who already have awareness and appreciation of the Cyber Security and Risk Analyst roles, in the context of law enforcement are welcomed. ## Description Location: London & Hybrid (60% / 3-days per week in office). The 'home base' Met location is Bow. We offer the flexibility to work in a Hybrid way, where you can deliver your best, including Working from Home (WFH). Travel across the Met Estate, to attend meetings as required by the business, is expected. Policing London is a hugely complex challenge that evolves every day. To make sure the Met is up to the task, we need the right IT and systems across our organisation. As a Senior Manager - Cyber Security Risk & Assurance, you will help to enable us to do our best for the London area. Join us and play your part in making London the safest capital in the world and delivering 'More Trust, Less Crime and High Standards'. As a member of the Met, you will also enjoy great benefits including annual leave, civil service pension arrangements, maternity/paternity support, as well as being part of a continuous learning culture. Digital & Innovation Business Group The Digital & Innovation Business Group brings together technology, the effective use of data, and our capability to deliver change and reform to drive the Met forward: this is central to progressing delivery of New Met for London 2. It includes the Met's Transformation, Technology, Data and Analytics functions, as well as work underway to make the organisation more productive and efficient (referred to as Productivity & Efficiency or P&E). The Group was created in early 2026 and is led by Marie Heracleous, Chief Digital & Innovation Officer. It's an exciting time to be part of D&I, as it builds new capabilities and ways of working to support the frontline and make a real difference to London. D&I is committed to creating an inclusive working environment. We support hybrid working, and the hiring manager will be happy to discuss arrangements for this role. Job Purpose The Cyber Security function within Digital & Innovation (D&I) provides comprehensive security support focusing on (but not exclusive to) threat profiles, quantifying risk, as well as being the custodian for technical security standards and patterns within the Met. It provides information up to the Senior Information Risk Owner (SIRO) on the current state of the Met's environment and illustrates the threats faced through numerous artefacts. The Cyber Security Risk & Assurance role plays a vital part in ensuring the security controls and cyber baseline meet the standards, architecture and compliance regimes are in place thus ensuring the Met and associated ecosystem is protected. Key Role Responsibilities: Cyber Security Strategy Support the implementation of the Cyber Security Strategy. Work with internal/external stakeholders in providing security assurance against the Cyber Security Annual Plan. Provide Cyber Security Risk & Assurance Across the Procurement / Project / Delivery Lifecycle. Assure. IT Health Checks, IRAR's and other risk related materials. Supplier certifications. Work directly with the Met Security Operations Centre ensuring that cyber controls (e.g. vulnerability management, threat hunting, intelligence) are conducted appropriately and in line with Met contractual requirements. Develop and Implement Security Policies Covering Live Met Estate. Patching Regime. Security Monitoring and Reporting. Develop Security Protocols and Procedures. Review Met Risk Approach pertaining to Live Estate. Continuous monitoring of supplier provided SOC to ensure they deliver services in line with their contract and develop monitoring to meet Met business requirements. Operational Support cyber related incidents as part of a Cyber Security Team 24/7 on-call rota., This post requires access to the most sensitive intelligence material on a daily basis. Applicants must hold or be prepared to undergo National Security Vetting (NSV) Developed Vetting (DV) level before taking up the post., English /*generated inline style */ Reports To Band S - Head of Cyber Security Delivery /*generated inline style */ Additional Information CVF Staff Band.pdf - 971KB Opens in a new window /*generated inline style */ Disability Confident Statement The Met is committed to being an equitable (fair and impartial) and inclusive employer for disabled people, striving to have a diverse and representative workforce at all levels. We encourage applications from people from the widest possible range of backgrounds, cultures and experiences. We particularly welcome applications from people with disabilities and long-term conditions, ethnic minority groups and women. As a Disability Confident Leader, the Met has committed to making disability equality part of our everyday practice. We ensure that people with disabilities and those with long term conditions have the opportunities to fulfil their potential and realise their aspirations. The Met is committed to making reasonable adjustments to the recruitment process to ensure disabled applicants can perform at their best. If you need any reasonable adjustments or changes to the application and recruitment process, we ask that you include this information within your application form. All matters will be treated in strict confidence. Please note, if you are applying for a police officer role or to become a police community support officer (PCSO) or designated detention officer (DDO), there is a minimum requirement that you must pass a job-related fitness test (JRFT) at point of entry. This does not apply to police staff roles. Find out more about police fitness standards. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code) - [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)