Security Risk Analyst
Department for Work and Pensions
Apply before 11:55 pm on Sunday 13th October 2024
Details
Reference number
Salary
Job grade
Contract type
Business area
Type of role
Information Technology
Security
Working pattern
Number of jobs available
Contents
Location
About the job
Job summary
Are you a developing Risk Analyst seeking an opportunity to work in a thriving and growing team?
If yes, we want you to join us at DWP Digital.
This is a key role to compliment the wider work being delivered within the Digital Security Risk Management (DSRM) team, with risk driving security, enabling a clear, practical, and realistic view of Cyber Security Risk information.
As a Security Risk Analyst, you will work within the Digital Group to help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements.
Please note this role requires you to pass Security Check clearance. For further information, please see 'Selection process details'.
Job description
The Security Risk Analyst will support, help shape, and deliver innovative ways of working to support how cyber security risk assessments are conducted within DWP.
The role will improve engagement with the risk function, collaborating with delivery teams and providing advice on how best to engage.
As a Security Risk Analyst, you will work towards developing a good understanding of the security tools and techniques used by DWP and to be able to contribute to core security deliverables.
You will be given appropriate responsibility and under the guidance of Cyber Security Risk Managers help build and maintain core services across digital security (including involvement and facilitation of Cyber Security Testing and Security Operations Centre Use Case process).
Summary of responsibilities include:
- Support risk management processes, issues, and dependencies (external and internal) for DSRM deliverables.
- Establish collaborative working across organisational boundaries, ensuring quality work is delivered at pace. Support the team lead in managing complex control and risk issues to help the wider team navigate a complex environment.
- Be involved with change and governance on behalf of the wider team in association with influencing security standards and governance boards, considering findings from across the wider cyber security teams.
- Communicate across a wide range of internal and external stakeholders, tailoring messages to ensure that it is right for the audience.
NB - it would be useful to have, or be prepared to work towards, a BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people controls, software development/ lifecycle, disaster recovery, investigation forensics and cryptography.
Person specification
When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria below:
- Undertakes basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team.
- Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team’s business area.
- Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources.
- Understand own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions.
If you would like to learn more about the role, please contact isaac.morrison@dwp.gov.uk.
Benefits
Alongside your salary, the Department for Work and Pensions contributes 28.97% towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
We also have a broad benefits package built around your work-life balance which includes:
- Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
- Generous annual leave – at least 23 days on entry, increasing up to 30 days over time (pro–rata for part time employees), plus 9 days public and privilege leave.
- Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
- Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
- Family friendly policies including enhanced maternity and shared parental leave pay after 1 year’s continuous service.
- Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
- An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women’s Network, National Race Network, National Disability Network (THRIVE) and many more.
This job role may be suitable for hybrid working, which is where an employee works part of the week in their DWP office and part of the week from home. This is a voluntary, non-contractual arrangement and your office will be your contractual place of work. The number of days that anyone will be able to work at home will be determined primarily by business need but personal circumstances and other relevant circumstances will also be taken into account. If you are successful, any opportunities for hybrid working, including whether a hybrid working arrangement is suitable for you, will be discussed with you prior to you taking up your post.
Salary Information
New entrants to the Civil Service will join on the band minimum.
Existing Civil Servants who secure a new role on lateral transfer should maintain their current salary.
Existing Civil Servants who gain promotion may move to the bottom of the grade pay scale or 10% increase in salary whichever would be the greater.
Things you need to know
Selection process details
As part of the application process you will be asked to complete a CV and personal statement. Further details around what this will entail are listed on the application form.
Stage 1: Application
Your application will consist of three parts:
1. A Personal Details application form.
2. Your employment history detailing your responsibilities, skills, accomplishments, plus your qualifications and relevant training. Please copy this information into the box field provided.
3. Personal statement up to 750 words. Further details around what this will entail are listed on the application form.
When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria listed in the Person Specification.
The sift panel will use the information in your employment history and personal statement to assess your experience, skills and knowledge against the essential criteria above.
For Hints and Tips on completing your application visit Applying for jobs at DWP Digital.
Applications will be sifted at regular intervals from the date the posts are advertised. Please apply as soon as you can, do not wait until the end of the campaign.
Important Information
- You will be asked to complete your employment history any information that you would customarily share on a CV should therefore be entered onto the application form.
- Personal details that could be used to identify you including your name, contact details and address must be removed for your application to be considered.
- If your employment history/personal statement contains any personal details your application will be withdrawn.
Sift and interview dates to be confirmed.
Stage 2: Interview
If you’re successful at sift stage you will be invited to a video interview via Microsoft Teams. There, you will be assessed against the experiences listed in the essential criteria.
You will be asked to do a 5-minute presentation on the following topic:
“Explain the elements of Cyber Security Risk Lifecycle”.
There will be 2-3 minutes for questions.
Interviews will take place from late October 2024.
Further information
Find out more about Working for DWP
A reserve list may be held for a period of 6 months from which further appointments can be made.
Reserve list candidates will be posted in merit order by location.
The Civil Service values honesty and integrity and expects all candidates to abide by these principles. Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words. Applications will be screened and if evidence of plagiarism or copying examples/answers from other sources is found, your application will be withdrawn. Internal DWP candidates may also face disciplinary action.
Reasonable Adjustment
At DWP we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce.
We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia.
If you need a change to be made so that you can make your application, you should: Contact Government Recruitment Service via DigitalRecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
Complete the “Reasonable Adjustments” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.
For further information on reasonable adjustments, terms and conditions and how we recruit visit the How We Recruit, page
Security Clearance Requirement
You must meet the security requirements before you can be appointed. The level of security needed is security check.
For meaningful checks to be carried out, you will need to have lived in the UK for a sufficient period of time, to enable appropriate checks to be carried out and produce a result which provides the required level of assurance. Whilst a lack of UK residency in itself is not necessarily a bar to a security clearance, and expectation of UK residency may range from 3 to 5 years. Failure to meet the residency requirements needed for the role may result in the withdrawal of provisional jobs offers.
For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting
Feedback will only be provided if you attend an interview or assessment.
Security
Nationality requirements
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Diversity and Inclusion
Apply and further information
Contact point for applicants
Job contact :
- Name : Isaac Morrison
- Email : isaac.morrison@dwp.gov.uk
Recruitment team
- Email : digitalrecruitment.grs@cabinetoffice.gov.uk
Further information
