Defence Digital – Cyber Security Policy Manager (Business Delivery)

Are you ready to work in one of the most interesting cyber security environments and share your experience to support national security?

Cyber security plays an integral role in protecting the UK against external and internal threats, acting as a deterrence to ensure that our Armed Forces have the strong cyber defences they need.

Cyber Defence and Risk (CyDR) is at the forefront of Cyber Security and Information Technology within Defence and is responsible for enabling Defence through the provision of specialist assurance and cyber security services across UK Defence including industry partners, other Government Departments and our international allies. Services provided by CyDR include:

• MOD defensive cyber strategy development
• Development of cyber security policy
• Managing and driving mitigation of Departmental cyber risk
• Security assurance and accreditation support and advice

CyDR sits within the Defence Digital team who provide digital and technology services to our Armed Forces.  Defence Digital operates at scale, with an annual budget in excess of £2Bn and a diverse team of 2,500 colleagues, it aims to make our Armed Forces some of the most technologically advanced in the world.

With a fantastic growing team of military and civilian staff operating across the UK it is a great time to be a cyber security professional in the Ministry of Defence.

If you can see yourself contributing to the world of CyDR the next chapter of your career may be with us!

This post is advertised at 37 hours per week.

Strategic Command is going through a significant transformation programme which aims to improve the way the Command conducts its business and delivers for Defence and the nation. As a consequence of this, all posts within Strategic Command Headquarters and in time the wider organisation, are/will be subject to review and potential changes as we continuously improve across the period of the transformation programme. These changes may be minor or could be more substantive and will generate new opportunities.  Throughout, the Command’s transformation programme is committed to following the MOD’s framework on managing and supporting people through the change process and places an emphasis on early and open consultation and engagement with the Command’s personnel and Trade Unions.

This post is eligible for a Digital Skills Allowance of up to £9,000 per annum. Eligibility for this allowance will be assessed at interview against 4 core technical skills only and reviewed annually in line with MOD policy.

Effective policy is essential to delivering cyber security across the wider Defence community. To be effective it must be properly considered, clearly articulated and coherent. The role will therefore bring together all aspects of business-focused Information and Cyber Security policy for the department and its stakeholders (including industry partners) and ensure that policy and guidance is sustainable and forward looking.

The Cyber Security Policy Manager (Business Delivery) works within the Governance, Risk and Compliance team within the Cyber Defence and Risk Directorate and is responsible to the Cyber Security Policy Assistant Head for ensuring:

• The coordination and maintenance of departmental non-technical policy and guidance pertaining to cyber security, including to the wider Defence community.
• Engagement with core stakeholders.

We are a small, highly specialised team, performing a critical role in Defence Digital. This is an exciting opportunity to join us and be part of our journey!

Responsibilities:

• Development and maintenance of Defence policy and guidance relating to information and cyber security focussed on business delivery.
• Ensure coherence and clarity of policy.
• Maintain understanding of future technology direction to ensure policy is forward looking.
• Maintain close liaison with key stakeholders across Defence and other government departments, to support wider policy activities.
• Identification, assessment and presentation of data to support evidence-based security policy.
• Analysis of new and forthcoming legislation or regulations to identify potential impact and ensure organisational security policies are compliant.
• Support departmental and wider work to develop mechanisms to drive continuous improvement and encourage the sharing of best practice in policy development.
• Fulfilment of desk-level Training Requirements Authority duties for relevant training course.
• Represent Cyber Security Policy team interests at internal and external meetings as required.
• Line management of Policy staff, ensuring workloads are balanced efficiently, resource issues are escalated in a timely fashion and personnel are professional and motivated.
• Support the development of mechanisms to drive continuous improvement and encourage the sharing of best practice.

If you have the following knowledge, skills and experience, we would love to hear from you!

Desirable qualifications: CISMP, CISSP or CCP; BSc or HND or equivalent in an ICT or Engineering related discipline.

Desirable memberships: CIISec (formerly IISP) or BCS

Desirable experience or knowledge of:

• Cyber Security Governance
• Cyber Security Policy and Standards
• Cyber Security Legal & Regulatory Environment & Compliance
• Risk understanding and mitigation

Dependent on the business need, there may be a requirement to travel to meetings within the UK (or potentially occasional overseas visits). This post does not offer any assistance with relocation allowances.

Due to security requirements this post is open to SOLE UK NATIONALS ONLY

Where business needs allow, some roles may be suitable for a combination of office and home-based working.  This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office, subject to local estates capacity.  Requirements to attend other locations for official business, or carry out detached duty in another MOD workplace, will also count towards this level of attendance. Applicants can request further information regarding how this may work in their team from the Vacancy Holder (see advert for contact details). DBS cannot respond to any questions about working arrangements.

We’ll assess you against these behaviours during the selection process:

• Leadership
• Making Effective Decisions

We’ll assess you against these technical skills during the selection process:

• Protective security – Practitioner
• Information risk assessment and risk management – Practitioner
• Applied security capability – Practitioner
• Threat Understanding – Practitioner

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A Civil Service pension with an average employer contribution of 27%
• 25 days annual leave rising (1 day per year) to 30 days upon completion of 5 years’ service
• Ability to roll over up to 10 days annual leave per year
• Minimum of 15 Days Special Leave in a rolling 12-month period to volunteer for military or emergency service reserve commitments
• Special Paid Leave for volunteering up to 6 days a year
• Enhanced maternity, paternity and adoption leave
• Most sites have good travel links with free car parking; many also have other facilities such as a Sports & Social Club and Gyms
• The full list can be seen here Discover my benefits

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.

MOD Recruitment Satisfaction Survey – we may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Notice sets out how we will use your personal data and your rights.

Job contact :

• Name : Defence Digital Talent Acquisition Team
• Email : ukstratcomdd-hr-talentacqdel@mod.gov.uk

Recruitment team

• Email : DBSCivPers-Resourcingteam3@mod.gov.uk