Total 2 Legal / Public / Security job vacancies in Blackburn, Lancashire, BB1 2FA

DBS DIT provides digital capability that supports corporate services across the Ministry of Defence, including Finance, Commercial, Payroll and Human Resources for Military Personnel, Civilian Personnel and Veterans.

Cyber Security Assessors are responsible for independent assessment of Delivery Teams’ adherence to Secure by Design and relevant risk and security policies and standards. They coordinate between Delivery Teams dealing with similar security challenges to optimise solutions and minimise duplication of effort. They are responsible for consistent, coherent advice and support to relevant capabilities. They identify, understand and mitigate cyber-related risks. They provide risk or service owners with advice to help them make well informed risk-based decisions.

As Cyber security Assessor within the DBS Cyber Team you will manage all day to day IT Security and System Information Assurance, and, applying Secure by Design, ensure that security is embedded in all stages of the application development life cycle, and that there is continuous monitoring through use. You will also advise on and test the efficacy of measures to build security into continuous integration and deployment with specific responsibilities for the day to day IT security for multiple Military and Civilian HR systems and Finance systems.

The role will require you to demonstrate a talent for solving complex problems and for effective communication at all levels. You will be able to advise on complex risk balance decisions, propose innovative solutions and to explain MOD’s security policy, governance and technology controls to non-IT/security experts. Senior Responsible Owners and Project Leads will rely on your expertise to ensure they have an accurate understanding of through-life cyber security risks, so they can make informed decisions. Projects may involve complex technical and security challenges and you will need a good understanding of technical controls and policy (JSP 440; JSP 604/453)

The Key Responsibilities are:

• Lead the embedment of Secure by Design (SbD) principles into application development by providing advice and internal consultancy on highly complex criteria and contexts for multiple systems.
• Manage system accreditation transition to SbD
• Lead multi-team assessment of application resilience throughout the DBS IT estate, reviewing regular application security reports, holding accountability and responsibility for secure design implementation;
• supporting delivery of main gate assurance of all projects and changes; ensuring compliance with Information Assurance Policy and Security Principles
• Lead and assure processes, and provide specialist advice though leadership on tooling and dynamic and static analysis in the product development life cycle.
• Lead Delivery Team Security Leads (previously Security Assurance Co-ordinator (SACs)) alongside senior decision makers to embed secure development life cycle and security awareness.

As a Principal Cyber Security Risk Manager, you will:


• Conduct cyber security risk assessments
• Implement continuous risk management; Lead and undertake risk management activities against the hardest or more novel scenarios, while applying the fundamental principles of risk management to a range of complex scenarios and lead regulatory or legislative compliance activities.
• Guide and direct specialist activities or others, actively promoting development in the applicable skills, providing leadership and sharing best practice widely across government, the public sector, and industry.
• Lead the analysis and derivation of complex security needs.
• Lead Cyber Security related risk assessments and other expert risk management activities, including providing guidance on establishing the organisation’s Cyber Security related governance arrangements.
• Provide guidance to ensure on-going confidence that fundamental organisational security needs have been met, including integrating a range of assurance approaches and techniques to give continued confidence to the risk, service or system owner.
• Shape leadership decision-making through
o Effective reporting and communication regarding the effectiveness of security processes across an organisation
o Providing recommendations to highly complex problems
o Acting as an SME for complex cyber risk management concerns, issues and problems

Proud member of the Disability Confident employer scheme

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme