A government client is recruiting for an interim Principal Cyber Risk Management and Assurance Advisor. In this role, you will lead security risk work on new and growing digital services. You will carry out risk assessments and IT Health Checks, check that cloud and SaaS tools meet NCSC security standards, and run Security Working Groups. You will give regular risk updates to senior leaders, advise teams on Secure by Design (including the safe use of AI), and help keep our risk register up to date.
You will also coach and train other teams, sharing good practice and helping them build their own skills.
Key Skills:
- Strong experience of cyber security risk assessments and assurance in large, fast-moving digital settings, ideally in government or critical infrastructure.
- A good understanding of threat modelling, security architecture and IT Health Checks.
- Experience working with SaaS, cloud services and cloud security principles.
- Knowledge of security standards and frameworks, such as Secure by Design, OWASP and GovAssure.
- The ability to explain complex risks in plain language to senior and non-technical people.
- Experience building good working relationships and leading security work across different teams.
- Experience mentoring or coaching others.
- The confidence to work on your own and spot risks from new technology such as AI.
Desirable Qualifications:
- CISP or CISM
If you have worked in large, complex government organisations within Cyber Security this assignment could be an excellent match for your next career move.