Lead Security Risk Assurance Manager

About the job

• Benefits
• Things you need to know
• Apply and further information

Location

Blackpool, Birmingham, Glasgow, Leeds, Manchester, Newcastle-upon-Tyne, Pontypridd, Sheffield.

Please note that for candidates requesting to work in Blackpool, this role will initially be based at Peel Park, Brunel Way, Blackpool and then at Fylde View in Blackpool town centre by the end of April 2027.

Please note that for candidates requesting to work in Newcastle, this role will initially be based at Benton Park View, and then at 1 Pilgrim Place in Newcastle city centre by the end of 2027.

Please note that for candidates requesting to work in Sheffield, this role will initially be based at either Hartshead Square or Kings Court. Colleagues in Hartshead Square will move to 1 West Bar, Sheffield city centre by summer 2027 and colleagues based in Kings Court will move to the same new location by autumn 2027.

About the job

Job summary

Each year DWP is responsible for delivering approximately £280 billion in benefits and pensions, with over eight hundred physical locations and around 1000 commercial suppliers. DWP holds substantial personal data and manages several critical digital systems and key elements of the Government’s critical national infrastructure.

Enterprise Security & Risk Management (ESRM) supports the secure delivery of DWP business, empowering the Department to operate within its security risk appetite, prioritise security improvement activities and maximise return on security investment.

As a senior leadership position in ESRM a Lead Security Risk Assurance Manager holds responsibility for producing high‑quality enterprise‑level security risk assessments or security risk assurance reports that can inform decision-making at the highest levels including Director General Finance, the Executive Team, and Departmental Audit & Risk Assurance Committee (DARAC).

This includes the identification and monitoring of enterprise-level security risks, contextualising principal security threats to identify strategic risks to DWP and help inform departmental security policy. Alternatively, a Lead Security Risk Assurance Manager will, ensure delivery of security assurance activities, undertake and oversee multiple activities to gather evidence on the security posture of DWP assets and services for example: interviews, sampling, design review, IT health checks and controls testing. ESRM analyse findings from these activities to provide confidence that DWP is sufficiently secure or identify areas for improvement.

A Lead Security Risk Assurance Manager is vital in understanding the big picture, synthesising information, and articulating how security risks could impact the department’s ability to operate, deliver services, maintain resilience, and protect staff, data, and assets.

The position requires an individual who can understand complex and interconnected risks across a large organisation, influence senior stakeholders, challenge assumptions, and provide clear, evidence-based advice on whether controls are effective, thus, enabling informed business decisions. Working across multiple functions and disciplines, the successful candidate will help DWP deliver its objectives securely, resiliently and effectively.

ESRM provide confidence through evidence, placing a strong focus on continuous improvement, looking wider and deeper than just compliance. We highlight good practice and provide a professional, impartial view of the potential improvements to the department’s security position.

Job description

Lead an area of Enterprise Security Risk or Security Assurance

• Develop, maintain and lead the production of timely Enterprise Security Risk or Assurance Products for senior leaders
• Oversee multi‑layered risk and assurance analysis covering threat scenarios, impacts, effectiveness of controls, and residual risk.

Deliver Complex Security Risk Analysis

• Identify interdependencies and cumulative impacts across systems, services and business areas, translating localised risks into an enterprise-wide understanding of potential consequences
• Break down large, ambiguous or abstract security problems into structured analytical components
• Gather, evaluate and synthesise information from diverse sources, including digital risk data, system-level risk assessments, threat intelligence, estate vulnerabilities, resilience data and people safety insights
• Apply structured analytical methods to generate robust findings, uncertainty judgements, and evidence‑based conclusions.

Influence Decision Makers

• Understand complex and interconnected risks, provide balanced and pragmatic advice that supports senior leaders in making informed decisions, recognising both risk exposure and business objectives
• Produce clear, actionable insights to inform Director General level decision‑making, risk appetite setting, and departmental prioritisation
• Articulate business impacts: how risks could affect operations, resilience, service delivery, customer experience, staff safety or data protection
• Support senior leaders (for example DWP's Finance Director General (DG) as risk owner) by outlining options, consequences and recommended mitigations.

Stakeholder Leadership and Engagement

• Build credibility with senior leaders, influencing across organisational boundaries and constructively challenging assumptions where required
• Build strong relationships with senior stakeholders across Digital, Estates, People Safety, Risk & Resilience, Commercial and wider security teams
• Coordinate and convene stakeholders to gather evidence, test assumptions and validate analysis.

Team Leadership and Delivery Management

• Lead, mentor and quality‑assure the work of a small team of colleagues
• Task and oversee scenario‑level analysis (for example physical estate failure scenarios, cyber resilience scenarios)
• Shape team capability, drive continuous improvement and support professionalisation of ESRM’s analytical approach.

Strategic and Tactical Risk Support

• Enable the business to achieve its objectives securely by identifying practical options, mitigations and routes to delivery within agreed risk appetite.
• Lead thematic/strategic risk assessments for priority business areas (for example arm’s length bodies)
• Deliver tactical assessments when the business requests security input on emerging issues (for example reviewing new operating models, or outreach activities)
• Provide options and recommendations while enabling the business to understand and own its risk decisions.

Given the geographic spread of our team, DWP customers, cross-government stakeholders and industry suppliers, you'll need to be willing to travel to other DWP locations, with periodic overnight stays required.

Person specification

We would love to hear from you if you can demonstrate your skills and experience across all the following essential criteria:

Experience providing risk assessment or assurance or decision support within large, complex environments involving multiple stakeholders, competing priorities and distributed accountabilities, alongside a strong understanding of security or risk principles.

Transferable experience (such as threat analysis, operational risk, resilience, or intelligence) is equally valuable. No mandatory qualifications are required

Strong stakeholder engagement and influencing capability - build credibility with senior leaders, gain buy-in across organisational boundaries, and communicate complex security risk issues in a clear and compelling way.

Demonstrate curiosity and professional scepticism – using questioning to test assumptions, understand the evidence to assure effectiveness of controls and develop a strong understanding of risk and business impact.

Ability to understand and communicate business impact - translating security, technical or operational issues into clear consequences for service delivery, resilience, staff safety or organisational performance

Leadership experience - able to guide and quality‑assure the work of others, support change, and contribute to improving or professionalising a team or function

Exceptional analytical skills - able to assess complex, and interconnected security or operational problems, identify dependencies and develop evidence based assurance opinions in ambiguous environments clearly and concisely.

Benefits

Alongside your salary of £57,946, Department for Work and Pensions contributes

£16,786 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

DWP have a broad benefits package built around your work-life balance which includes:

• Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
• Generous annual leave – at least 23 days on entry, increasing up to 30 days over time (pro–rata for part time employees), plus 9 days public and privilege leave.
• Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
• Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
• Family friendly policies including enhanced maternity and shared parental leave pay after 1 year’s continuous service.
• Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
• An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women’s Network, National Race Network, National Disability Network (THRIVE) and many more.

Hybrid Working

This role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non- contractual arrangement and your office will be your contractual place of work.

If a hybrid working arrangement is suitable for the role and for you, you will normally be required to spend a minimum of 60% of your contracted working hours from your DWP office.

If you have a disability, caring responsibilities, or other circumstances that may affect your ability to meet the minimum office attendance requirement, please discuss this with us using the contact details in this advert.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

Application & Sift

After submission of the first stage of your application you will be invited to complete a Civil Service Judgement Test and a Civil Service Numerical Test. If you successfully pass these tests, you will be invited to complete the next stage of the application.

Please complete the online tests as soon as possible (within 24-48 hours is recommended), the closing date for the tests is 23:55 on 01st October 2026. If you fail to complete the online tests before the deadline your application will be withdrawn.

Guidance for the tests will be available when you are invited to take the tests. The tests are administered online and accessed via the CS Jobs website.

You will be di