Lead Security Risk Assurance Manager

Each year DWP is responsible for delivering approximately £280 billion in benefits and pensions, with over eight hundred physical locations and around 1000 commercial suppliers. DWP holds substantial personal data and manages several critical digital systems and key elements of the Government’s critical national infrastructure.

Enterprise Security & Risk Management (ESRM) supports the secure delivery of DWP business, empowering the Department to operate within its security risk appetite, prioritise security improvement activities and maximise return on security investment.

As a senior leadership position in ESRM a Lead Security Risk Assurance Manager holds responsibility for producing high‑quality enterprise‑level security risk assessments or security risk assurance reports that can inform decision-making at the highest levels including Director General Finance, the Executive Team, and Departmental Audit & Risk Assurance Committee (DARAC).

This includes the identification and monitoring of enterprise-level security risks, contextualising principal security threats to identify strategic risks to DWP and help inform departmental security policy. Alternatively, a Lead Security Risk Assurance Manager will, ensure delivery of security assurance activities, undertake and oversee multiple activities to gather evidence on the security posture of DWP assets and services for example: interviews, sampling, design review, IT health checks and controls testing. ESRM analyse findings from these activities to provide confidence that DWP is sufficiently secure or identify areas for improvement.

A Lead Security Risk Assurance Manager is vital in understanding the big picture, synthesising information, and articulating how security risks could impact the department’s ability to operate, deliver services, maintain resilience, and protect staff, data, and assets.

The position requires an individual who can understand complex and interconnected risks across a large organisation, influence senior stakeholders, challenge assumptions, and provide clear, evidence-based advice on whether controls are effective, thus, enabling informed business decisions. Working across multiple functions and disciplines, the successful candidate will help DWP deliver its objectives securely, resiliently and effectively.

ESRM provide confidence through evidence, placing a strong focus on continuous improvement, looking wider and deeper than just compliance. We highlight good practice and provide a professional, impartial view of the potential improvements to the department’s security position.

Lead an area of Enterprise Security Risk or Security Assurance

• Develop, maintain and lead the production of timely Enterprise Security Risk or Assurance Products for senior leaders
• Oversee multi‑layered risk and assurance analysis covering threat scenarios, impacts, effectiveness of controls, and residual risk.

Deliver Complex Security Risk Analysis

• Identify interdependencies and cumulative impacts across systems, services and business areas, translating localised risks into an enterprise-wide understanding of potential consequences
• Break down large, ambiguous or abstract security problems into structured analytical components
• Gather, evaluate and synthesise information from diverse sources, including digital risk data, system-level risk assessments, threat intelligence, estate vulnerabilities, resilience data and people safety insights
• Apply structured analytical methods to generate robust findings, uncertainty judgements, and evidence‑based conclusions.

Influence Decision Makers

• Understand complex and interconnected risks, provide balanced and pragmatic advice that supports senior leaders in making informed decisions, recognising both risk exposure and business objectives
• Produce clear, actionable insights to inform Director General level decision‑making, risk appetite setting, and departmental prioritisation
• Articulate business impacts: how risks could affect operations, resilience, service delivery, customer experience, staff safety or data protection
• Support senior leaders (for example DWP's Finance Director General (DG) as risk owner) by outlining options, consequences and recommended mitigations.

Stakeholder Leadership and Engagement

• Build credibility with senior leaders, influencing across organisational boundaries and constructively challenging assumptions where required
• Build strong relationships with senior stakeholders across Digital, Estates, People Safety, Risk & Resilience, Commercial and wider security teams
• Coordinate and convene stakeholders to gather evidence, test assumptions and validate analysis.

Team Leadership and Delivery Management

• Lead, mentor and quality‑assure the work of a small team of colleagues
• Task and oversee scenario‑level analysis (for example physical estate failure scenarios, cyber resilience scenarios)
• Shape team capability, drive continuous improvement and support professionalisation of ESRM’s analytical approach.

Strategic and Tactical Risk Support

• Enable the business to achieve its objectives securely by identifying practical options, mitigations and routes to delivery within agreed risk appetite.
• Lead thematic/strategic risk assessments for priority business areas (for example arm’s length bodies)
• Deliver tactical assessments when the business requests security input on emerging issues (for example reviewing new operating models, or outreach activities)
• Provide options and recommendations while enabling the business to understand and own its risk decisions.

Given the geographic spread of our team, DWP customers, cross-government stakeholders and industry suppliers, you'll need to be willing to travel to other DWP locations, with periodic overnight stays required.

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Application & SiftAfter submission of the first stage of your application you will be invited to complete a Civil Service Judgement Test and a Civil Service Numerical Test. If you successfully pass these tests, you will be invited to complete the next stage of the application.

Please complete the online tests as soon as possible (within 24-48 hours is recommended), the closing date for the tests is 23:55 on 01st October 2026. If you fail to complete the online tests before the deadline your application will be withdrawn.

Guidance for the tests will be available when you are invited to take the tests. The tests are administered online and accessed via the CS Jobs website.

You will be directed to the Talogy - True Talent – Scheduled Maintenance Window Webpage for online tests during an outage.

Our online test supplier will be performing scheduled maintenance between 12 to 1pm on 13th September 2026 and 4pm to midnight on 27th September 2026. You will be unable to access tests during this period.

If you are in the middle of a test when the maintenance begins, your progress will be paused. You will be able to resume your test from where you left off via your application centre once the downtime has ended. Please note that you will not be able to launch any new tests while the system is offline.

The next stage is your curriculum vitae (CV) and personal statement.

Your curriculum vitae (CV) should include your full employment history and demonstrate your skills and experience across all of the essential criteria (listed below) relevant to this role, giving details of key achievements and including details of the work and projects in which you have been involved:

Experience providing risk assessment or assurance or decision support within large, complex environments involving multiple stakeholders, competing priorities and distributed accountabilities, alongside a strong understanding of security or risk principles.

Transferable experience (such as threat analysis, operational risk, resilience, or intelligence) is equally valuable. No mandatory qualifications are required

Strong stakeholder engagement and influencing capability - build credibility with senior leaders, gain buy-in across organisational boundaries, and communicate complex security risk issues in a clear and compelling way.

Demonstrate curiosity and professional scepticism – using questioning to test assumptions, understand the evidence to assure effectiveness of controls and develop a strong understanding of risk and business impact.

Ability to understand and communicate business impact - translating security, technical or operational issues into clear consequences for service delivery, resilience, staff safety or organisational performance

Leadership experience - able to guide and quality‑assure the work of others, support change, and contribute to improving or professionalising a team or function

Exceptional analytical skills - able to assess complex, and interconnected security or operational problems, identify dependencies and develop evidence based assurance opinions in ambiguous environments clearly and concisely.

Your Personal Statement should not exceed 500 words and will describe a time when you strengthened or embedded analytical rigour within a complex organisation, explaining how you led the change, improved data-driven decision-making, and influenced stakeholders to adopt a new approach. You are advised to use the full word count.

Once you have submitted your completed application, both your CV and Personal Statement will be scored and you will receive one overall score.

The benchmark for candidates to proceed to the next stage may also be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.

If we receive a high number of applications then an initial sift will be carried out using the following criteria:

• Experience providing risk assessment or assurance or decision support within large, complex environments involving multiple stakeholders, competing priorities and distributed accountabilities, alongside a strong understanding of security or risk principles.

The Civil Service values honesty and integrity and expects all candidates to abide by these principles. The evidence you provide must relate to your own experiences. If evidence of plagiarism, or sharing of questions, information or answers throughout any part of the selection process is found, your application will be withdrawn. Examples of plagiarism can include:

Presenting the work, ideas and experience of others as your own Copying content from an online/published source

Using forms of Artificial Intelligence to produce application content which you present as your own.

We recognise that AI may be helpful when applying for this role, but it is important to use it in the right way. Read the Artificial intelligence and recruitment , Civil Service Careers to understand how you can make the best use of AI while ensuring your application remains authentic and effective.

Interview StageIf you are successful at the sift stage you will be invited to a face-to-face interview. Interview location will be decided once the sift has taken place and will be where the majority of candidates request to be posted. Prior to participating in this interview you will be expected to complete an in-tray exercise.

The in-tray exercise and face-to-face interview will both happen on the same day, with the in-tray exercise being first.

Sift and interview dates to be confirmed.

If you cannot attend an interview on any of the dates offered please get in touch with us.

PostingsPostings will be made in merit order.

Standard promotion rules will apply, and successful candidates will be placed on the pay scale and terms and conditions of DWP.

Offers of employmentFollowing the interview stage, should you not reach the required standard for the advertised G7 role, we may be able to offer you a role which would be a grade below the advertised post under our “Near Miss” process. Any candidates falling into this category will be contacted once the interview results have been released.

Further Information​

At the Department for Work and Pensions (DWP) we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce.

Find out more about working for DWP on the DWP Careers Hub.

Reserve List

A reserve list may be held for a period of 6 months from which further appointments can be made.

If you are placed on a reserve list but we cannot immediately offer you a post, please note:

• If you are later offered the role you applied for, in a location you have expressed a preference for, and you decline the offer or are unable to take up the post within a reasonable timeframe you will be withdrawn from the campaign and removed from the reserve list, other than in exceptional circumstances (e.g. a contractual Part Time Working Pattern cannot be accommodated in the initial role offered or in cases of serious ill health).
• If DWP makes an offer of an alternative role or location to that which you originally applied for, and you decline that offer, you will be able to remain on the reserve list.

Disability Confident Scheme

If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.

Reasonable Adjustments

We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia.

If you need a change to be made so that you can make your application, you should contact the Government Recruitment Service via DWPRecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Complete the “Reasonable Adjustments” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

Integrity, plagiarism and Civil Service Principles

The Civil Service values honesty and integrity and expects all candidates to abide by these principles.

Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words.

Examples of plagiarism can include:

• Presenting the work, ideas and experience of others as your own
• Copying content or answers from an online or published source that is not your own

Disclosure and Barring Service and Internal Fraud Database Checks

To process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service or Disclosure Scotland on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

If successful and transferring from another Government Department, a criminal record check will be carried out.

Important

New entrants are expected to join on the minimum of the pay band.

Before applying for this vacancy, current employees of DWP should check whether a successful application would result in changes to their terms & conditions of employment, e.g. mobility, pay, allowances. If you are a current employee and are successful you must be able to be released from your current post within four weeks.

Those on protected TUPE/ COSoP terms and conditions applying on promotion or voluntary permanent level move will adopt DWP’s Terms and Conditions and this may have a different impact on pay and allowances. Please review this prior to acceptance of a role.

Civil Servants that would transfer into DWP from other government organisations, following successful application, will assume DWP's terms & conditions of employment current on the day they are posted, unless DWP has stated otherwise in writing. Accepting a post will be taken to mean acceptance of revised terms & conditions.

Civil Servants applying on promotion will usually be appointed to the salary minimum or within 10% of existing salary.

Any move to DWP from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may, however, be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at the Childcare Choices Website.

For further information on National Security Vetting please visit the Demystifying Vetting website.

Feedback

Feedback will only be provided if you attend an interview or assessment.