Head of Security Policy

Job summary

DWP’s security policies define the measures that help to protect DWP, its infrastructure and its staff from physical, personnel and cyber threats. These policies are continuously under review to ensure they are fit for purpose, take account of emerging risks and threats, and support the business in achieving its objectives securely.

In addition to ensuring DWP’s security policies are regularly reviewed and updated, and keeping pace with the ever-changing risk landscape, the team works closely with a range of projects and initiatives across DWP, in ensuring compliance with security policies is embedded within new technologies and processes, by design.

Security Policy Team sits within Security Policy and Central Services (SP&CS) area of Security & Data Protection

Job description

This role is to develop, adapt, and manage a suite of security policies on behalf of the department, ensuring alignment with other key areas of the security profession (such as Risk Management) whilst also taking into account the evolving requirements of the department to fulfil its strategic objectives.

The role involves working across the security community, Digital and the wider Department to oversee the development, delivery and embedding of our policies , and ensuring compliance with them. A summary of the role requirements as follows:

• Lead the development, delivery and maintenance of a framework of security policies to address each aspect of DWP’s security needs, working with specific internal and external expert domains
• Ensure the Departmental security policy portfolio complies with security obligations, statutory requirements, industry developments, best practice and international standards, and legal obligations and is continually evolving to enable the selection of appropriate security controls and respond to emerging threats and risks
• Lead the policy portfolio review process, ensuring reviews are undertaken as scheduled
• Lead the development, consultation and launch of new policies as required.
• Oversee the governance of security policy and standards, through Policy and Standards Review Groups and regular reporting to Senior Leadership Team and other relevant governance boards.
• Ensure the Security Policy team has the skills, capability and resource to provide advice and support to the business regarding security policy matters.
• Continually strive to improve the profile and visibility of security policies across DWP, working in partnership with business areas and other security functions
• Demonstrate leadership qualities by applying a consistent vision, energy and drive that motivates the team to meet business objectives, setting them in the context of wider security and Departmental objectives
• Create and champion an environment of continuous improvement across the team, where learning from feedback, security risks, events, incidents, investigations and trends becomes integral, “security by design” and processes.
• Build peer and senior relationships that lead to proactively contributing and feeding information into the senior leadership team.

Please note this role may include travelling and occasional overnight stays.

Person specification

The right candidate for this role will be able to demonstrate:

• Experience of industry standards and relevant legislation for information security policies and control frameworks such as the ISO27000 series, NIST, GDPR and the legal and regulatory framework in which they operate would be desirable
• Experience in the concepts and application of information security, and of current IT security, with practical experience of information risk principles and technologies, with the ability to explain the purpose and provide advice and support.

Security Check (SC) clearance; candidates without must be willing to undergo security vetting.

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Communicating and Influencing
• Managing a Quality Service
• Seeing the Big Picture

Benefits

Alongside your salary of £75,026, Department for Work and Pensions contributes £21,735 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

DWP have a broad benefits package built around your work-life balance which includes:

• Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
• Generous annual leave – at least 23 days on entry, increasing up to 30 days over time (pro–rata for part time employees), plus 9 days public and privilege leave.
• Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
• Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
• Family friendly policies including enhanced maternity and shared parental leave pay after 1 year’s continuous service.
• Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
• An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Women’s Network, National Race Network, National Disability Network (THRIVE) and many more.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths and Experience.

Stage 1 – Application and Sift

As part of the application process, you will be required to submit:

• A completed application form, including your employment history, education, professional qualifications and relevant achievements.
• A CV and a personal statement of a maximum 1000 words demonstrating how you meet the criteria.
• The sift panel will assess your application against the criteria, using the information provided in your employment history and personal statement.

• We will also assess the following behaviours at interview:

  • Leadership
  • Communicating and influencing
  • Managing a Quality Service.
  • Seeing the Big Picture

Due to DWP’s use of anonymised recruitment practices it is not possible for applicants to upload/attach a CV; any information that you would customarily share on a