Operational Security Specialist (£39,163)

Job summary

Are you an analytically minded person who would like the opportunity to play a key role within Driver and Vehicle Licensing Agency's (DVLA) Cyber Security Team?

Are you a strong team player who enjoys making key decisions?

If so we'd love to hear from you!

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King’s birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at DVLA roles: Driver and Vehicle Licensing Agency - Department for Transport Careers

Job description

We are currently looking for Operational Cyber Security Specialists to join our Information Technology Services (ITS) Directorate at DVLA.

You will work as part of a team, completing analysis and reporting of new vulnerabilities, monitoring patching and anti-virus compliance along with risk assessing new technology. You will work with colleagues across ITS to support remediation activities, maintain associated tooling and ensure timely renewal of supporting contracts. You will thrive managing a varied and challenging workload and welcome autonomy to your role. You will support the DVLA’s Information Technology Security Officer (ITSO) in carrying out Cyber Security duties that support the DVLA.

The role will offer you real opportunities to build on your professional experience across a wide range of Cyber related activities with a fully supported learning and development programme leading to Professional Certification where appropriate.

Your responsibilities will include, but aren’t limited to:

• Responsible for monitoring operational IT Security, producing regular management reports, undertaking trend analysis, tracking resource, evaluating the fitness for purpose and effectiveness of security processes.
• Manages IT Security Change request process complying with SLAs.
• Interprets and contributes to the development of IT Security policies in accordance HMG and CESG recommendations. Ongoing assurance of fitness for purpose of IT security policies.
• Provides expert advice and recommendations regarding risk assessments and business impact analysis for defined information systems.
• Independently review project and change documentation providing advice on ways of improving control mechanisms, identifying, and evaluating risks and how they can be mitigated as and when required.
• Monitor the efficiency and effectiveness of the Cyber Security processes across the organisation and make recommendations for continual improvement.
• Ensuring that all IT teams follow cyber security processes and escalate any repeated non-conformity.
• Support the ITSO in handling incidents.
• Document security risks and mitigation as required.
• Conducts cyber security reviews when necessary and pro-actively participate in relevant Cyber Security Forums as directed by Cyber Security Services Manager.

For further information on the role, please read the attached role profile. Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Would you like to find out more about the role, the digital team and what it’s like to work at DVLA? If so, we are organising a familiarisation session where you can virtually 'meet the team' on Wednesday 23rd September at 11:30am

Please click here to book on.

Person specification

To be successful in this role you will need to have the following experience:

• The successful candidate will have the ability to manage and filter workflow as well as organise and prioritise workloads to maximise productivity.
• You have strong attention to detail when completing analysis and reporting.
• You will have good internal stakeholder management skills and the ability to influence across all grades within the organisation.
• You will have excellent analytical and problem-solving skills, with the ability to quickly develop recommendations based on quantitative and qualitative evidence.
• You will be adaptable and flexible, adjusting to the requirements and strategic direction of the Agency.
• Overall, you will be a strong team player with the ability to work as part of a team in order to deliver results.

Additional skills and experiences

• Awareness and understanding how vulnerability management impacts the organisation and experience in a technical competency in managing vulnerabilities and associated tooling or technology.
• Being familiar with risk methodologies and experience in applying these methodologies.
• You will be keen to work on your personal development and be willing to work towards completing various qualifications whilst in the role.
• You will take a keen interest in and actively keep abreast of the latest developments and technological changes impacting Cyber Security.

Additional Information

Working for the DVLA Digital Team

At DVLA, licensing is just the start. Every project you implement, touch and deliver has a ripple effect that’ll wash across the nation. Here the work you’re doing has the capacity to change the way 53 million people interact with our services. As we aim to keep our roads some of the safest in the world, our innovative, transformative digital-led services help optimise a nation of individuals and business every single day.

To see how our people are transforming our digital services, head over to our DVLA Digital Services Blog and, to understand more about the great opportunities and benefits of working at DVLA read our Inside DVLA blog .

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 35 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (the location cited in the advert) or, when required for business reasons, in another office/work location. There may be occasions where you are required to attend above the minimum expectation.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).

Security Check

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check . To allow for meaningful checks to be carried out, candidates will be required to have at least 5 years continuous residency in the UK. All applicants for this role must ensure that they meet this minimum residency requirement - if you do not, your application will be withdrawn.

Visa Sponsorship

Please note that we do not hold a UK Visa & Immigration (UKVI) Skilled Worker Licence sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship. Candidates must ensure they have the appropriate rights to work in the UK before application.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions

Technical skills

We'll assess you against these technical skills during the selection process:

• Incident Management, incident investigation and response (Practitioner)
• Threat Understanding (Practitioner)
• Cyber Security Operations (Practitioner)
• Information risk assessment and risk management (Practitioner)

Benefits

Alongside your salary of £35,663, Driver and Vehicle Licensing Agency contributes

£10,331 towards you being a member of the Civil Service Defined Benefit Pension scheme.

Find out what benefits a Civil Service Pension provides (opens in a new window).

Passionate, reliable and always willing to push yourself and those around you, you’ll continue to seek improvement in your own role and challenge us too. Because we pride ourselves on how we approach your development. From training courses to specialist skills workshops and opportunities to grow your expertise, we thrive when you thrive. You can find out more about all of the above here alongside a full list of our benefits:

• Best in class learning and development tailored to your role
• An environment with flexible working options where we encourage a great work-life balance
• A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
• Generous employer contribution of 28.9%, depending on chosen pension scheme
• Flexible working options where we encourage a great work-life balance.
• Digital communities with clear career frameworks
• On-site gym plus personal training available (membership applies)
• On-site nursery, restaurants and coffee bar
• 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff
• Free parking

Find out more about the benefits of working at DfT and its agencies (opens in a new window).

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours and Technical skills.

Our selection process ensures a comprehensive assessment of each applicant's qualifications, skills, and potential fit within our organisation.

The selection process for this role will be:

Stage 1: Sift of CV and personal statement

Stage 2: Interview

You must be successful at each stage to progress to the next stage.

Stage 1: Sift

At sift, you will be assessed against the following Success Profile elements:

Experience – you will be asked to provide a CV (unlimited wordcount) and personal statement (1000-word count).

Please provide evidence of your Experience of the following:

• Incident management, incident investigation and response
• Threat understanding
• Cyber security operations
• Making Effective Decisions

The sift will take place 28/09/26.

Should we receive a high volume of quality applications, we may invite a shortlist of the highest scoring candidates to interview. This means that some applications that meet the required standard could be placed ‘on hold’ after the sift and invited to interview if the vacant position(s) remain unfilled. You will be notified if your application is being put ‘on hold’ once the sift has been completed. Following interviews, any applicants remaining on hold will be notified by the panel o