Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance)

The Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance) is the senior accountable owner for the Home Office cyber governance, risk and compliance (GRC) function, cyber strategy, cyber security professional practice, and cyber business management function. The postholder provides enterprise-wide leadership and second-line assurance over cyber risk management, policy, standards and reporting, ensuring cyber risk is understood, owned and managed proportionately across the organisation.

Reporting directly to the Chief Information Security Officer (CISO), the role sets the strategic direction and operating model for cyber GRC, strategy, professional practice and business management, ensuring effective governance and decision-making through clear risk appetite, metrics and management information.

The role has leadership responsibility for the heads of governance, risk, compliance, business management, strategy and professional practice functions, ensuring the delivery of an integrated, high-performing capability that supports Home Office cyber security objectives.

The role leads capability planning, recruitment, career pathways and deployment of cyber professionals across Product Family Groups and Platforms, so the right skills and capacity are aligned to service criticality, delivery priorities and the threat landscape.

This is a senior strategic leadership role with enterprise-wide accountability for cyber security governance, risk and compliance and ownership of the Home Office cyber security professional practice. As the Deputy Chief Information Security Officer (Cyber Strategy, Governance, Risk and Compliance), you will provide leadership across cyber GRC and professional practice, ensuring they align with and enable delivery of the overall Home Office Cyber Strategy. You will ensure that policies, standards, assurance and reporting remain aligned to the threat landscape, business priorities and government policy.

In addition, the role provides strategic leadership for the Cyber Business Management function, ensuring effective financial management, workforce planning, performance reporting, governance support, resource prioritisation and organisational effectiveness across the cyber security function. The postholder will ensure these activities operate effectively across the function and support delivery of the Home Office Cyber Strategy., You will lead the cyber security professional practice, with accountability for capability planning, recruitment, career pathways, deployment and effective use of cyber professionals across the central cyber function and within digital delivery teams. Your leadership will thereby ensure the right skills and capacity are aligned to risk, service criticality and delivery priorities.

Your main day to day responsibilities will be:

• Owning and evolving the cyber security GRC and cyber practice strategy, ensuring alignment with Home Office priorities, Digital First Transformation Programme and cross government policy.
• Providing strategic leadership of second line cyber risk and assurance, including setting assurance priorities, aggregating and analysing enterprise cyber risk, and reporting clear, actionable insights to senior leadership and governance forums.
• Setting, maintaining and assuring enterprise cyber security policies, standards, frameworks and reusable patterns, ensuring they are proportionate, risk based and consistently applied across Product Family Groups and Platforms.
• Owning the cyber reporting framework, including defining metrics, dashboards and management information to support effective oversight of cyber risk, maturity and performance.
• Leading the cyber security professional practice, including capability and workforce planning, recruitment, standards, career pathways, professional assurance and succession planning. Including, overseeing the prioritisation and allocation of cyber professionals, balancing demand, capacity and capability.
• Building and sustaining strong, trusted relationships with senior business, digital, technology and security leaders across the Home Office and wider government, including representing the cyber GRC and practice function externally with bodies such as NCSC & UK Cyber Security Council.
• Deputising for the CISO as required, including representing the function on the CISO Senior Management Team (SMT) and supporting senior decision-making and governance. Providing direct line management and leadership for multiple G6 leads, When writing a supporting statement, it is important that you:
• Read the job specification so you are clear about the job requirements. Structure your personal statement to reflect the essential criteria listed in the advert.
• Make sure you provide evidence against each of the listed criteria - i.e. ?experienced in leading high performing and diverse teams and promoting inclusivity.? When have you led a team, how large, what did you do to promote inclusivity, how did you handle diversity?
• Ensure any evidence you provide demonstrates the impact of your actions in that situation, provide statistical evidence where relevant., * UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

You will have a demonstrable passion for cyber security, with proven experience operating at enterprise scale, and the ability to lead complex governance, risk and professional practice functions.

You will be able to demonstrate experience in:

• Providing senior leadership for a large cyber security function, setting clear vision, strategy and operating models aligned to organisational priorities and government policy.
• Influencing senior leaders and decisionmakers across business, digital, technology and security functions to embed effective cyber governance and risk ownership.
• Providing authoritative advice, assurance and constructive challenge on cyber security matters at executive and board level.
• Championing a strong cyber security culture, continuous improvement and value for money across the organisation.

For full list of requirements and skills for the role, please check the candidate pack attached at the bottom of the advert., Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .

£90,000 - £105,000 Standard Cabinet Office rules on pay will apply to civil servants appointed on level transfer or promotion. Their salary will increase to the minimum of the SCS PB 1 range or by a promotion award of up to 10% more than their current basic salary excluding all allowances (whichever is the greater). Individuals appointed on level transfer will retain their existing basic salary excluding all allowances. A Civil Service Pension with an employer contribution of 28.97% GBP, Alongside your salary of £90,000, Home Office contributes £26,073 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%