Operational Security Specialist (£39,163)

Are you an analytically minded person who would like the opportunity to play a key role within Driver and Vehicle Licensing Agency's (DVLA) Cyber Security Team?

Are you a strong team player who enjoys making key decisions?

If so we'd love to hear from you!

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at DVLA roles: Driver and Vehicle Licensing Agency - Department for Transport Careers

We are currently looking for Operational Cyber Security Specialists to join our Information Technology Services (ITS) Directorate at DVLA.

You will work as part of a team, completing analysis and reporting of new vulnerabilities, monitoring patching and anti-virus compliance along with risk assessing new technology. You will work with colleagues across ITS to support remediation activities, maintain associated tooling and ensure timely renewal of supporting contracts. You will thrive managing a varied and challenging workload and welcome autonomy to your role. You will support the DVLA’s Information Technology Security Officer (ITSO) in carrying out Cyber Security duties that support the DVLA.

The role will offer you real opportunities to build on your professional experience across a wide range of Cyber related activities with a fully supported learning and development programme leading to Professional Certification where appropriate.

Your responsibilities will include, but aren’t limited to:

• Responsible for monitoring operational IT Security, producing regular management reports, undertaking trend analysis, tracking resource, evaluating the fitness for purpose and effectiveness of security processes.
• Manages IT Security Change request process complying with SLAs.
• Interprets and contributes to the development of IT Security policies in accordance HMG and CESG recommendations. Ongoing assurance of fitness for purpose of IT security policies.
• Provides expert advice and recommendations regarding risk assessments and business impact analysis for defined information systems.
• Independently review project and change documentation providing advice on ways of improving control mechanisms, identifying, and evaluating risks and how they can be mitigated as and when required.
• Monitor the efficiency and effectiveness of the Cyber Security processes across the organisation and make recommendations for continual improvement.
• Ensuring that all IT teams follow cyber security processes and escalate any repeated non-conformity.
• Support the ITSO in handling incidents.
• Document security risks and mitigation as required.
• Conducts cyber security reviews when necessary and pro-actively participate in relevant Cyber Security Forums as directed by Cyber Security Services Manager.

For further information on the role, please read the attached role profile. Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Would you like to find out more about the role, the digital team and what it’s like to work at DVLA? If so, we are organising a familiarisation session where you can virtually 'meet the team' on Wednesday 23rd September at 11:30am

Please click here to book on.

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Technical skills.

Our selection process ensures a comprehensive assessment of each applicant's qualifications, skills, and potential fit within our organisation.

The selection process for this role will be:

Stage 1: Sift of CV and personal statement

Stage 2: Interview

You must be successful at each stage to progress to the next stage.

Stage 1: Sift

At sift, you will be assessed against the following Success Profile elements:

Experience – you will be asked to provide a CV (unlimited wordcount) and personal statement (1000-word count).

Please provide evidence of your Experience of the following:

• Incident management, incident investigation and response
• Threat understanding
• Cyber security operations
• Making Effective Decisions

The sift will take place 28/09/26.

Should we receive a high volume of quality applications, we may invite a shortlist of the highest scoring candidates to interview. This means that some applications that meet the required standard could be placed ‘on hold’ after the sift and invited to interview if the vacant position(s) remain unfilled. You will be notified if your application is being put ‘on hold’ once the sift has been completed. Following interviews, any applicants remaining on hold will be notified by the panel of the next steps regarding their application.

Stage 2: Interview

At interview stage, you will be assessed against the following Success Profile elements:

Behaviours –

• Making Effective Decisions

Technical -

• Incident management, incident investigation and response – Practitioner
• Threat understanding – Practitioner
• Cyber security operations – Practitioner
• Information risk assessment and risk management – Practitioner

Please note that we will try to meet the dates set out in the advert. There may be occasions when these dates will change.

This interview will be conducted in person at our Swansea office. Further details will be provided to you should you be selected for interview.

You can find out more about our hiring process, how to apply, and application and interview guidance on our careers site

Appointments for this position will be made in order of merit. If you are successful in the selection process but there are no further available posts for the advertised role, you may be contacted to discuss an offer for a lower graded role (with similar experience and responsibility requirements). If you are unsuccessful in the selection process, your application may be considered for a lower graded position if your demonstrated skills and experience meet the requirements of the alternative position. Candidates will be considered in order of merit.

Further information on the selection process

We will also hold a 12-month reserve list for this role, which may lead to potential opportunities beyond the role you applied for. You can read more about our reserve lists here.

Reasonable Adjustments

As a Disability Confident Leader employer, we are committed to ensuring that the recruitment process is fair, accessible and allows all candidates to perform at their best. If a person with a visible or non-visible disability is substantially disadvantaged, we have a duty to make reasonable changes to our processes.

Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need during the recruitment process. For instance, you may need wheelchair access at an interview, or if you’re deaf, a Language Service Professional.

If you need a reasonable adjustment so that you can complete your application, you should contact Government Recruitment Service via dftrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Document Accessibility

This job advert contains links to the DfT Careers website. Our website provides useful guidance and information that can support you during the application process. If you are experiencing accessibility problems with any attachments on this advert or the information on our website, please contact the email address in the 'Contact point for applicants' section.

Further Information

For more information about how we hire, and for useful tips on submitting your application for this role, visit the How We Hire page of our DfT Careers website. You can find detailed information about the recruitment process and what to expect when applying for a role.

Pre-Employment Checking

If your application is successful but you have been dismissed from the Civil Service, your application could be removed at the pre-employment checking stage depending on the nature of the dismissal.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

All external applicants and current employees of accredited non-departmental public bodies (NDPBs) will be required to undergo a Social Media Check. A Social Media Check is a review of your publicly available online activity, typically across platforms like LinkedIn, Facebook, X (formerly Twitter), Instagram, and others. The purpose is to identify any public posts or content that could raise concerns for employers, such as:

• Hate speech or discriminatory behaviour
• Threats or acts of violence
• Illegal activity or substance misuse
• Sexually explicit material
• Extremist views or affiliations

Importantly, this check does not involve hacking into your accounts or accessing private messages. It only considers content you have chosen to make public. Employers use this kind of screening to help ensure their workplace remains safe, inclusive, and aligned with company values. It’s not about judging your personality or lifestyle - it’s about checking for potential red flags that might affect the role or company culture. If you have questions or concerns about the social media check, we would be happy to explain in more detail what’s being looked at and how your data is handled securely and fairly.

For further information on National Security Vetting please visit the Demystifying Vetting website.

Feedback

Feedback will only be provided if you attend an interview or assessment.