> Markdown version of [/jobs/ext/3847954-senior-cyber-security-risk-manager-secure-by-design](https://www.wearedevelopers.com/jobs/ext/3847954-senior-cyber-security-risk-manager-secure-by-design). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Risk Manager - Secure by Design - **Company:** Home Office - **Location:** Salford, UK (Remote available) - **Experience:** Expert - **Salary:** £49,850.0 - £52,850.0 - **Contract:** Permanent contract - **Skills:** Encodings, Cyber Security, Digital Arts, Digital Technology, Information Technology - **Published:** October 21, 2026 - **Apply:** https://www.totaljobs.com/job/senior-information-security-manager/the-home-office-job108107797 ## About the Role You?ll have a demonstrable passion for Cyber Security with the following skills or experience in: * Overseeing risk reviews, developing risk treatment plans and communicating those risks to others. * Planning and delivery of project level activities. * Adopting a structured approach to executing and documenting audits, following agreed standards. * Maintaining integrity of records to support and satisfy audit trails. * Communications and executive stakeholder engagement and management. Desirable criteria A strong understanding of the UK Government's Secure by Design policy and principles, with the ability to apply them effectively to support the delivery of secure Cyber Security solutions and services. SFIA capability framework Skills for the Information Age (SFIA) version 8 is the technical framework that sets the standard capability and development of all levels in the Home Office. This is a link to the capability framework: All skills A - Z English (sfia-online.org). We use set SFIA technical skills to form our interview questions and we will assess you against these technical skills during the selection process. The essential skills listed above are reflective of the Home Office Government Digital and Data Profession Career Framework (based on the industry standard SFIA framework). Use the SFIA Levels of responsibility to understand what would be expected for each technical skills listed below., We'll assess you against these behaviours during the selection process: * Communicating and Influencing * Seeing the Big Picture Technical skills, This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills., For meaningful security checks to be carried out, individuals need to have lived in the UK for a sufficient period of time. Learn more on our website. Security Checks - Home Office Careers. Please note that this role requires Security Check (SC) clearance, which needs 5 years? UK residency in the past 5 years. Failure to meet this residency requirement will result in your security clearance application being rejected. This role requires Non-Police Personnel Vetting Level 3 (NPPV3) clearance. Candidates who do not currently hold this level of clearance must be willing to undergo the vetting process. Failure to obtain or maintain the required clearance may result in the offer of employment being withdrawn., We are unable to sponsor any individuals via Skilled Worker Sponsorship / Tier 2 (General) work visas as we do not hold a UK Visa & Immigration (UKVI) Skilled Worker License., Successful candidates must undergo a basic (or equivalent) criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check . ## Description Home Office Digital designs, builds, and maintains all IT services for the department as well as a number of its Arms Length Bodies, wider government organisations and for the public. Every year Home Office systems support up to three million visa applications, checks on 100 million border crossings, up to eight million passport applications and deliver 140 million police checks on people, vehicles, and property. As a Senior Cyber Security Risk Manager within Home Office Cyber Security, you will play a key role in embedding Secure by Design across our organisation, driving the cultural change needed to create a strong and positive security culture. You will work with project teams to ensure cyber security is considered from the outset and recognised as a shared responsibility throughout the delivery lifecycle. You will ensure Secure by Design activities are part of the organisation?s government gate review life cycle so that security risks are addressed early and escalated in the right way. You will help escalate projects with low security confidence for extra support or oversight. You will also promote a standardised approach to Secure by Design activities across project, programmes and portfolios. Additionally you will encourage the use of templates, tools, and checklists (like the Secure by Design self assessment tracker) to help teams apply Secure by Design principles consistently. You will join an expert team of cyber professionals, committed to reducing exposure to cyber-attack of new and existing digital systems. You will be aided by a diverse and supportive organisational culture, and a commitment to further your continuous development. Where business needs allow, some roles may be suitable for a combination of office and home-based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office. Applicants can raise any queries to the email address at the bottom of the advert. Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital., The Senior Cyber Security Risk Manager within Secure by Design plans and implements organisation-wide processes and procedures for the embedding of Secure by Design as a framework approach to increasing the organisations Cyber Security. They monitor the uptake, adoption and effectiveness of utilising the Secure by design principles and activities across the organisation and make recommendations for continuous improvement., * Ensure Secure by Design activities are part of your organisation?s government gate review life cycle so that security risks are addressed early and escalated in the right way. * Help escalate projects with low security confidence for extra support or oversight. * Promote a standardised approach to Secure by Design activities across project,programmes and portfolios. * Encourage the use of templates, tools, and checklists (like the Secure by Design self assessment tracker) to help teams apply Secure by Design principles consistently., As a Senior Cyber Security Risk Manager your main day to day responsibilities will be: * Explaining how you have incorporated Secure by Design into digital delivery within your own organisation. Include governance processes and the role each team plays in delivering Secure by Design activities. * Working within established security and risk management governance structures in support of Secure by Design, usually under supervision to support, review and undertake straightforward risk management activities. * Keeping awareness high by regularly using the Secure by Design communications toolkit to educate delivery, security, and supporting teams on their roles and the benefits of adopting Secure by Design practices. * Attending government Secure by Design webinars and encourage your teams to join, sharing key takeaways across your organisation to reinforce shared learning and continuous improvement. * Embedding Secure by Design into your onboarding process to help new staff understand its importance from day one. Consider adding guidance to your organisation?s intranet or knowledge hub as a permanent reference. * Reviewing and actioning feedback from projects and the spend control process. * Liaising with colleagues to update your internal processes and guidance based on what?s working well and where challenges have emerged. * Staying up to date with the latest Secure by Design developments. Working Pattern Due to the business requirements of this role, it is only available on a full-time basis. However, compressed hours are available., Strategy and architecture: * Security and Privacy + Information Assurance (INAS) ? Level 3 + Information security (SCTY) ? Level 3 * Governance, Risk and Compliance + Risk management (BURM) ? Level 3 + Audit (AUDT) ? Level 3 * Advice and Guidance + Specialist advice (TECH) ? Level 3 (Generic Level 3 descriptor) Relationships and Engagement * Stakeholder Management + Stakeholder relationship management (RLMT) ? Level 3 (Generic Level 3 descriptor), The allowance values are set by the Home Office, subject to remaining in a qualifying role. This allowance is non-contractual, subject to an annual review and could be withdrawn at any time. For both new entrants and existing civil servants, the total compensation offer is a combination of base salary and, if applicable, a capability-based allowance. The pay ranges for this role are National: £49,850 - £52,850 and London: £53,850 - £56,850. New entrants to the Civil Service will start on the pay range minimum. For existing civil servants, our policies on level transfer and promotion will apply. Reasonable Adjustments If a person with disabilities is at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes. If you need a change to be made so that you can make your application, you should: * Contact Government Recruitment Service via as soon as possible before the closing date to discuss your needs * Complete the ?Assistance Required? section in the ?Additional Requirements? page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you're deaf, a language service professional If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the ?Contact point for applicants? section. Feedback Feedback will only be provided if you attend an interview or assessment., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service