Cyber Security Consultant

Join to apply for the Cyber Security Consultant role at HM Revenue & Customs

Join to apply for the Cyber Security Consultant role at HM Revenue & Customs

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from HM Revenue & Customs

Hybrid Working from one of our Regional Centres

Active SC Clearance must be held to be considered

Initial 6 month contract

The Team

The Government Security Centre for Cyber (Cyber GSeC) develops and provides, consultancy and advice services to government departments to build their cyber security resilience, and the cyber security posture across HMG. We work directly in support of the Government Cyber Security Strategy (GCSS).

The Cyber GSeC is hosted by, and sits with HMRC Security, which is part of the Chief Digital and Information Officer (CDIO) area of HMRC. Though the GSeC sits within these functions, it is a distinct entity that is separate from the day-to-day HMRC security function.

The Project

Cyber GSeC also has the responsibility for delivering projects on behalf of the Government Security Group (GSG) within the Cabinet Office and has commenced work to build a new service capability helping government departments build and improve their cyber incident response plans and exercising.

We are seeking a Senior Cyber Security Professional to provide subject matter expertise across cyber incident response planning and exercising to support to this project and build the service capability.

Deliverables will include the production of artefacts to support departments in the formation of their cyber security incident response plans, including guidance documents, templates, plans and procedures for handling cyber security incidents or carrying out exercises.

The role will also include liaison with senior cross-government stakeholders including National Technical Authorities, third party service providers and department leads to ensure transfer of knowledge and alignment to government policy, and industry best practice and standards, regarding this specialism.

Please note this is not a technical testing role.

The Role

As a Senior Cyber Security Professional leading service delivery within Cyber GSeC, you will play a key role in improving the cyber security posture of His Majesty’s Government. Championing the outcomes of the Government Cyber Security Strategy you will oversee the design, implementation, uptake, and continued improvement of Cyber Security best practice and Cyber GSeC services that provide tangible improvement to the cyber security of Lead Government Departments and their underlying ALBs.

You may also be required to contribute to other outcomes of HMRC’s Cyber Security Technical Services function.

You will be assigned to one of our technical services or projects, delivering against project plans and milestones. You will be confident in your ability to engage at senior levels across the UK security community and will be expected to be involved in our engagement with a wide range of key stakeholders that may include the Government Security Group (GSG), National Cyber Security Centre (NCSC) and the Central Digital and Data Office (CDDO).

The core element of the Senior Cyber Security Professional role will be to provide targeted, expert and risk-based technical security advice and guidance across the breadth of HM Government. The successful candidate will be able to evidence their technical skills and experience in cyber security fields relevant to the services we deliver.

Responsibilities can include:

• Delivering outcomes against one of our service lines or projects in support of the Government Cyber Security Strategy (GCSS).
• The development, implementation, delivery, and continuous improvement of Cyber GSeC advice and guidance services across circa 400 government organisations, ensuring alignment to relevant cyber security standards and architectural requirements.
• Selecting suitable security techniques, tools, and test strategies to confirm compliance with relevant HMG security standards, providing suggested remediation actions.
• Leading the development of Security Principles, Policies and Technical Standards aligned to business context…