Head of Operational Information Security, Risk and Assurance
Department for Culture, Media and Sport
- Department
- Department for Culture, Media and Sport
- Location
- London, Manchester
- Openings
- 1 post
- Grade
- Grade 6
- Salary
- £64,903 to £82,556
- Closing
- 9 days left
- Profession
- DDaT
- Contract
- Fixed term, Loan, Secondment
- Security clearance
- DV
- Working pattern
- Flexible working, Full-time, Job share
Job summary
We are transforming DCMS to meet the demands of an agile, delivery-focused department leading on some of the highest priority work for the government’s agenda to drive growth, enrich lives and level-up society.
Our modernisation plans include critical investment in our systems, ensuring they are fit for purpose and reducing the manual input required, as well as the ongoing development of a new central function to transform the way DCMS uses technology, data and digital services.
We also want to transform how we solve policy challenges by having user centred design and collaboration within multi-disciplinary teams at the heart of what we do.
This is an incredibly exciting time to join the team within DCMS. Our mission is to digitally enable how DCMS delivers its priority outcomes which can adapt and respond to the changing needs of the sectors and partners we work with. Can you help us get there?
What they’re looking for
- The ideal candidate would have the following key skills and experience, please note that desirable skills will only be used in the event of tied candidates.
- Essential requirements:
- Expert-level ability and experience of successfully identifying, managing, and mitigating cyber and information risks, supported by a formal qualification (e.g. IRM, CRISC, or equivalent).
- Experience developing and leading security assurance frameworks and audit activities to provide organisational confidence.
- Demonstrable skill in and experience of providing evidence-based advice to senior leaders/Boards and translating complex technical risks for non-specialist audiences.
- Experience leading multi-disciplinary teams of cyber risk, information management or data protection specialists, balancing operational delivery with professional development across boundaries.
- Understanding of fundamental data protection principles, UK privacy legislation and their application in a large organisation, and evidence of delivering privacy compliance through others.
- Desirable skills:
- Working knowledge of either GovAssure, Secure by Design, or the Government Cyber Security Strategy.
- An understanding of supply chain risk management including PESTLE analysis and/or experience of holistic information management via Knowledge and Information Management (KIM) teams would be beneficial.
- We are running an information session where prospective applicants can find out more about the role. This will be hosted by David Booth.
- The session will be an opportunity to hear more about the role, the team and wider directorate and the department. It will also be an opportunity for you to ask any questions. Please register your interest by filling out this Registration form and you will be sent an invitation. Invites will only be sent after this deadline has passed.
- Please note that the session will not be recorded and will not focus on the DCMS recruitment process - please direct any queries that you have on this topic (timelines, reasonable adjustments, onboarding etc) to resourcing.team@dcms.gov.uk
Behaviours you’ll be assessed on
This advert says the panel will score you against these behaviours at Grade 6 level. Each one links to worked examples.
Job description
Role responsibilities:
- This is a leadership role that oversees three distinct technical teams.
- Own and maintain the information security assessment process, supporting privacy and secure by design principles across operational projects and business-as-usual activity.
- Ensure the team maintain and implement information security procedures, guidance and self-help tools to support consistent compliance across the organisation.
- Ensure the team delivers training and practical support to improve understanding of data protection and information management compliance.
- Ensure that the team maintain accurate records and that monthly and annual reporting is produced for cyber risk, data protection and information management compliance activity.
- Lead and manage the team (three G7s directly and up to six staff indirectly), ensuring clear priorities, effective delivery, performance management and development support, and appropriate representation at relevant meetings.
- Clear Board and Executive Committee reports on data protection and information management compliance and present at Board level as required.
- Manage contracts and maintain relationships with suppliers to ensure good service quality and effective risk management.
Nationality requirements
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)
Selection process
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.
To apply for this vacancy, you will need to submit the following documents which will assessed against the experience success profile:
- A CV setting out your career history, with key responsibilities and achievements. Please ensure you provide employment history that relates to the essential and desirable criteria, and that any gaps in employment history within the last 2 years are explained. The CV should not exceed more than 2 x A4 pages and you should insert your CV into the "Job History" section on the Civil Service Jobs application form.
- A Statement of Suitability (max 750 words) explaining how you consider your personal skills, qualities and experience provide evidence of your suitability for the role in reference to the essential requirements highlighted. You may also choose to reference the desirable skills listed however these will not be considered in the assessment of your application except in circumstances where there are a high number and calibre of candidates.
For the shortlist, we will select applicants demonstrating the best fit for the role by considering the evidence provided in your application.
In the event of a large number of applicants, an initial sift will be conducted on the statement of suitability. Those who are successful in the initial sift will then be scored on all elements of the application.
For support in writing your application and interviewing, please refer to the ‘Application and Interview Guidance’ document attached to the job advert.
The interview process will assess behaviours, technical skills, and experience.
The behaviours to be tested at interview are:
- Leadership
- Managing a Quality Service
The Technical Skills to be be tested at interview are:
- Information risk assessment and risk management
- Risk understanding and mitigation
You will also be required to prepare a presentation to demonstrate your relevant experience. Full details of this, including the topic, length of time, and whether or not you will need to use visual aids, will be sent to you prior to your interview.
For indicative sift and interview dates please refer to the attached Candidate Information Pack.
In most cases interviews will take place remotely via Google Meet video call. However please refer to the Candidate Information Pack to confirm the interview approach.
Further Information
If the vacancy is offered as FTA/Loan, existing Civil Servants must join on a Loan basis only. Prior agreement to be released on loan must be obtained before commencing the application process. In the case of Civil Servants, the terms of the loan will be agreed between the home and host department and the Civil Servant. This includes grade on return.
This role is full time only. Applicants who wish to work an alternative pattern are welcome to apply however your preferred working pattern may not be available and you should discuss this with the vacancy holder before applying.
For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting
A reserve list may be held for a period of 12 months from which further appointments can be made.
Any move to Department for Culture, Media and Sport from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk
New entrants are expected to join on the minimum of the pay band.
DCMS has a London and a National pay scale. For more information on this, including the circumstances in which each pay scale will apply, please see the ‘Candidate Information Pack’ attached.
If successful and transferring from another Government Department a criminal record check may be carried out.
In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.
Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.
A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.
Reasonable Adjustment
We are committed to supporting candidates so they can perform at their best throughout the recruitment process. This includes making reasonable adjustments to our process.
In order to request an adjustment, please: Complete the ‘Assistance required’ section on the ‘Additional requirements’ page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or a verbal test rather than a written one.
Alternatively, contact the Government Recruitment Service via dcmsrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
Accessibility
If you are experiencing accessibility difficulties with any of the attachments, please contact us. Contact details can be found in the 'contact point for applicants' section of the job advert.
Feedback
Feedback will only be provided if you attend an interview or assessment.
Practise before you apply
Civil Service panels score every answer against the Success Profiles behaviours at Grade 6 level. Practise STAR answers and get them marked against the same framework.
3 free questions · No card needed
Similar vacancies
- Principal Technical Architect · Government Digital Service · £72,825+
- Service Owner · Ministry of Housing, Communities and Local Government · £72,686
- Platform Owner · HM Revenue and Customs · £71,725+
- Lead Technical Architect · Department for Work and Pensions · £75,026+
- Forward Deployed Engineer III - Justice AI Unit (Ref: 16587) · Ministry of Justice · £71,381+