Cyber Security Risk Analyst

From healthcare to artificial intelligence, energy to national security, we provide legal advice to government departments on nation-changing subjects.

At Government Legal Department we have a vital, single-minded purpose: to help the Government govern well within the rule of law. This is complemented by our exciting vision to be an outstanding legal organisation, committed to the highest standards of service and professionalism and a brilliant place to work where we can all thrive and fulfil our potential.

Our work touches almost every aspect of public life. We are the largest provider of legal services across government, working on high profile matters.

Our respected professionals are involved in everything from regulation and litigation to advice on drafting legislation. They provide expertise to the full range of government departments. We are at the heart of delivering the government’s priorities and our success depends on our people.

GLD is a non-ministerial government department headed by the Treasury Solicitor, our Permanent Secretary, and employs nearly 4000 people, including nearly 3000 legal professionals. We have offices nationwide, in Bristol, Leeds, inner and outer London and Manchester. Our lawyers can also be located within other departments and overseas.

GLD also depends on a range of cross-functional professionals to provide our corporate services. There are nearly 1000 colleagues playing an essential part in helping GLD to achieve its purpose and truly deliver much more than law.

This is an exciting time to join GLD, with cutting edge legal work on global issues and a transformation agenda which is ensuring the Department exemplifies the Modern Civil Service.

To find out more about what we do you can view our introductory film. On our website you can hear from team members, find out how to apply and learn about the benefits of working for GLD. You can also read more about the future vision for GLD in our GLD Strategy 2024 – 2027.

​The Digital, Data and Cyber Division is transforming the way GLD works through modern and secure digital services. ​

We are building an ever expanding and modern digital workplace that empowers our people, strengthens collaboration and enables the organisation to operate efficiently, securely and sustainably. ​

Through agile delivery and user-centred approaches, we design and deliver products and services in partnership with the people who use them, ensuring solutions meet real needs and deliver lasting value.

As part of the wider Government Digital and Data profession, we play a key role in transforming how government operates, enabling better outcomes for colleagues, stakeholders and the public we serve.

The Role

Join GLD at an exciting stage in the evolution of its Cyber Security capability. At the heart of our day-to-day Cyber operations, you’ll turn complex risks into clear, practical decisions—helping new services, applications, suppliers and technology changes move forward securely and with confidence.

You’ll collaborate with technical teams, service owners, suppliers and governance leaders to uncover cyber risks, shape practical solutions and ensure confident, well-evidenced decisions.

This is an ideal opportunity for someone organised, curious and pragmatic—an engaging communicator who can make cyber security clear and relevant to both technical and non-technical audiences.

Key Responsibilities

• Drive day-to-day cyber security operations, coordinating requests, tracking risks, progressing vulnerabilities and building robust evidence.
• Shape secure technology change through the Change Advisory Board, challenging risk, testing and rollback plans to support confident decisions.
• Deliver proportionate Security Risk Assessments for new applications, services, suppliers, contracts and significant technology changes.
• Strengthen supply-chain assurance by assessing how third parties access, process, host and connect to GLD data and systems.
• Review cloud, SaaS, Microsoft 365, Azure, on-premises and hybrid environments to improve access, configuration, monitoring and resilience.
• Advance GLD’s security maturity through penetration testing, vulnerability remediation, ISO 27001, Cyber Essentials Plus and audit activity.
• Turn complex cyber requirements into clear, practical actions by collaborating with service owners, Commercial, Information Governance, suppliers and technical teams.

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths, Experience and Technical skills.

Application

To apply for this post you need to complete the application on Civil Service Jobs. The deadline for this application is Monday, 19th October 2026 at 12:00 Midday. You can search for the job using the reference number below.

In your application you will be assessed on the following:

• A CV setting out your employment history, previous skills and experience, and qualifications, if held. Please ensure you have provided reasons for any gaps within the last two years, as part of the application form. The CV will be used to assess key skills and experience and technical professional skills, as set out in the Person Specification.
• A personal statement of no more than 1000 words demonstrating your Technical professional skills as listed under personal specification.

CV Guidance for candidates

Please find the following guidance on how to populate the three sections of the CV when completing the online application: You will be asked to provide your, employment history, previous skills and experience, and qualifications.

For Employment History – please add your employment history, you can set out the roles you have completed in the past with start to end dates.

For Previous Skills and Experience - please add your experience, skills, achievements, key responsibilities, and any transferable skills you can bring to this role.

For Qualifications – please list the details of your education and qualifications achieved.

Application Errors

Please take extra care to tick the correct boxes in the eligibility sections of your application form. We understand mistakes sometimes happen but if you contact us later than two working days (Monday-Friday) before the vacancy closes, we will not be able to reopen your application for you. If you do make a mistake with your eligibility form, please contact us via: activecampaigns@governmentlegal.gov.uk . Use the subject line to insert appropriate wording for example – ‘Please re-open my application – [insert vacancy ref] & vacancy closing date [insert date]’.

Eligibility Pre-Sift

There are essential eligibility requirements for this role. As part of the application process you will be asked to confirm you meet the full criteria. To be eligible for this role, you must confirm the following:

• If you are a UK national or if you have been granted indefinite leave to remain
• If you have limited leave to remain in the UK and are currently a visa holder.
• If you currently hold a visa you will be asked to confirm the visa type, expiry date and the current sponsor for a skilled worker visa, if applicable.

If you do not meet the above requirements your application will not progress and you will be rejected during the pre-sift, as your application will not have passed the eligibility requirements.

Selection Process

After the closing date, the appointing panel shall assess candidates’ suitability for the role based on evidence provided in their application against the behaviours, key skills and experience and technical professional skills outlined in the person specification.

STAGED-SIFT: If there are a large number of applications the panel will conduct a two (2)-part staged sift. The initial sift will be on the CV alone. If you meet the minimum criteria for the CV, your application will then be sifted on the Personal Statement.

Candidates assessed as not demonstrating the required experience in their CV will not progress to have their Personal Statement assessed; they will be deemed as unsuccessful in the first stage of the two-stage sift. Candidates assessed as demonstrating the required experience in their Personal Statement will progress to the second stage of the two-stage sift where their interview will be assessed.

Candidates assessed as not demonstrating the required experience in their Personal Statement will be deemed as unsuccessful in the second stage of the two-stage sift.

In the eventuality that there are a high number of applicants successful at sift, GLD may operate a longlist, whereby applicants who have been shortlisted and met the minimum pass mark but are not selected for interview will have their application placed on hold. After the initial interview round candidates on the longlist may be offered an interview, should there still be posts available.

Interview

If you are invited to interview, you will be assessed on your performance in the criteria listed in the Person Specification, alongside scenario based exercises and strength-based questions. These criteria are:

• Behaviour: Communicating and influencing
• Behaviour: Making effective decisions
• Key skills and experience
• Technical professional skills

Presentation at Interview

As part of this interview candidates will be required to deliver a short 5 –minute presentation, based on a cyber security scenario. The details of the presentation will be confirmed in advance. The presentation will assess technical professional skills.

Your interview will take place online.

Offer and Reserve List

The timeline later in this pack indicates the date by which decisions are expected to be made, and all shortlisted candidates will be advised of the outcome as soon as possible thereafter.

All communications regarding your application will be made through Civil Service Jobs.

All candidates will be notified of the outcome as soon as possible after the interview. Feedback will only be provided if you attend an interview.

We appoint in strict order of merit. If you meet the minimum criteria for this position but are not successful for a post, you will be placed on the reserve list. We may contact you to see if you are interested in a post at the same, or a lower grade, in GLD should one arise.

Feedback will only be provided if you attend an interview or assessment.