Head of Cyber Security Compliance and Assurance

Your main day to day responsibilities will be:

Delivering annual GovAssure assessments across the Home Office (HO) and its Arms-Length Bodies, including supporting deep‑dive Cyber Assessment Framework (CAF) reviews for the department’s most critical and CNI services.
Overseeing HO Cyber Assurance, leading the department’s cyber second line. Provide effective check‑and‑challenge across products and portfolios to ensure compliance with security policies and required controls.
Maintaining the HO Three Lines of Defence model aligned to the Cyber Assurance Framework, working with the Cyber Policy Team to develop and update assurance policies, standards, processes, and guidance.
Managing the Third‑Party Assurance (TPA) function, covering regulatory and legislative compliance for HO business areas and suppliers, including ownership of associated tooling, budgets, and contracts.
Managing the Internal Audit function to deliver cyber reviews and audits, assess control effectiveness, and drive continuous improvement.
Leading analysis of complex security and information assurance requirements and advise on cyber governance arrangements to maintain organisational security confidence.
Communicating findings and risk assessment outcomes clearly to senior leaders across government, shaping decisions on security strategy, risk management, and policy. Champion risk‑management policy and ensure alignment with regulation and wider government standards.