> Markdown version of [/jobs/ext/3281789-principal-cyber-security-risk-manager](https://www.wearedevelopers.com/jobs/ext/3281789-principal-cyber-security-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Cyber Security Risk Manager - **Company:** Early Bird - **Location:** Bristol, UK - **Salary:** £57,515.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Customer Data Management, Service Design, Service Development Studio, Data Strategy - **Published:** September 14, 2026 - **Apply:** https://www.reed.co.uk/jobs/principal-cyber-security-risk-manager/57342346 ## About the Role * A Chartered Cyber Professional or be willing to work towards becoming Chartered. * Demonstrate experience in cloud security across at least one platform of AWS or Azure and be willing to undertake formal training and certifications in this area. * As a Principal Cyber Risk Manager you are inquisitive and enjoy understanding the context of the full service and product suite you are supporting. You work in a matrix team with roles such as developers, User experience and service design, business analysis to bring a rounded approach to a Service. * You are good at making evidenced based recommendations to both Service Owners and Senior Security Leadership roles around the level of security risk being managed within each Product. * You are part of a wider Security profession and support the development of that profession as part of a leadership role in the organisation and are able to bring strategic influence to your local Services and Products. ## Description The DVSA are continuing to strengthen security capability across the business. This role will form a part of a growing Cyber function continuing to embed and maintain an assurance and response function protecting our Services and customer data. Our work also supports the DVSA Data Strategy which has recently been refreshed. This sets the direction for making the Agency an evidence based and data driven organisation whilst maintaining an appropriate level of security of our services and data. You will work with the wider Security function as well as supporting Service Owners and multi-disciplinary teams to ensure that security is built into the service development lifecycle and strategic planning. You will be responsible for providing the consolidated risk picture for the Products within that Service and recommending risk acceptance aligning with defined risk appetites. You will lead a small service group team of security professionals to support the assurance as well as engage as necessary with the Enterprise Architecture processes via the Security Architecture function to influence pattern adoption. Joining our department comes with many benefits, including: * Employer pension contribution of 28.97% of your salary. * 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King's birthday. * Flexible working options where we encourage a great work-life balance., * Lead and undertake risk management activities against the hardest or most novel scenarios, while applying the fundamental principles of risk management to a range of complex scenarios, and lead regulatory or legislative compliance activities. * Guide and direct specialist activities of others, actively promoting development in the applicable skills, providing leadership to other risk managers, and sharing best practice widely across government, the public sector, and industry. * Lead the analysis and derivation of complex security needs. * Lead Cyber Security related risk assessments and other expert risk management activities, including providing guidance on establishing the organisation's Cyber Securityrelated governance arrangements. * Provide guidance to ensure ongoing confidence that fundamental organisational security needs have been met, including integrating a range of assurance approaches and techniques to give continued confidence to the risk, service or system owner. * Shape leadership decision-making through: * effective reporting and communication regarding the effectiveness of security processes across an organisation * providing recommendations to highly complex problems * acting as an SME for complex cyber risk management concerns, issues and problems Great line management is important to us as an organisation, and we will equip and support line managers to develop the skills set out in the Civil Service Line Management Standards. ## Related Videos - [Building Security Champions](https://www.wearedevelopers.com/videos/360-building-security-champions) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What If We Designed Employee Experience Like a Customer Journey?](https://www.wearedevelopers.com/videos/1824-what-if-we-designed-employee-experience-like-a-customer-journey) - [Hacking Your Vacation: Using Data for Fun](https://www.wearedevelopers.com/videos/585-hacking-your-vacation-using-data-for-fun) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Design as an algorithm, not as a feature](https://www.wearedevelopers.com/videos/471-design-as-an-algorithm-not-as-a-feature) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)