Secure Systems and Data Governance Lead

Job summary

Are you passionate about protecting sensitive information and strengthening data governance?

Can you balance security, risk management and operational delivery in a complex environment?

Do you have the expertise to lead secure systems and data governance across a major government organisation?

If so, we’d love to hear from you!

This is an exciting time to join the Digital, Information and Security Directorate within the Department for Transport as we restructure our directorate to ensure we are ready for future challenges, building a more sustainable, skilled and in-house capability.

Protect information. Strengthen governance. Enable secure operations.

Lead the management of secure systems and data governance arrangements that help the Department for Transport protect sensitive information, reduce risk and maximise the value of its data assets.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here

• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays a privilege day for the King’s birthday

• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below!

Find out more about what it's like working at Department for Transport Central - Department for Transport Careers.

Job description

Join the Department for Transport's Digital, Information and Security Directorate and play a key role in protecting sensitive information and improving how data is managed across the organisation. As a Secure Systems and Data Governance Lead, you will help ensure secure, compliant operations while supporting the effective governance of the department's information assets.

Working within the Protect Service Line, you'll oversee systems used to manage information classified above Official and support the governance processes that ensure data is used, stored and protected effectively throughout its lifecycle. You'll work closely with Information Asset Owners and stakeholders across the department to strengthen data governance, improve data literacy and embed risk management into everyday operations.

You'll also support the management of secure communication systems and cryptographic services, ensuring they are operated in accordance with government standards and security requirements. Through collaboration, leadership and practical expertise, you'll help minimise data risks, strengthen governance arrangements and enable secure ways of working.

This is an excellent opportunity for a security professional who enjoys combining information governance, risk management and operational delivery to make a meaningful impact.

Your responsibilities will include, but aren’t limited to:

• Catalogue, monitor, and identify data assets that are essential to the organisation’s operations or services.

• Assign ownership of data, ensuring there is a clear RACI (responsible, accountable, consulted, and informed) matrix in the organisation.

• Build and manage a network of information asset owners and encourage better data literacy within the organisation.

• Incorporate governance of data into routine processes and manage risk processes around data.

• Be an advocate for better use and management of data, working within the organisation to minimise data risks and increase data literacy.

For further information on the role, please read the role profile. Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Person specification

To be successful in this role you will need to have the following experience:

• Confident communicator with sound judgement and security management experience.
• Substantial experience of policy and operational experience in security.
• Professional certifications (CISSP, Certified ISO27001 Practitioner, or equivalent), or willing to work towards.
• Strong knowledge of security threats, risk management, and mitigation strategies.
• Excellent leadership and communication skills.
• Ability to work under pressure and handle multiple tasks.
• Strategic thinking and problem-solving skills.
• Familiarity with data governance and Government Security Function.
• Experience delivering quality service in high-pressure environments.
• Experience delivering services across government and/or private sector customers.

Additional information

The role is part of the Government Security Profession Career Framework and utilises an enhanced Capability–Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £44,241. In addition to this the role includes a Digital and Data allowance of up to £14,756.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process. Here are more details on the pay framework.

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week.

Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 32 hours per week.

Occasional travel to other offices will be required, which may involve overnight stays.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (one of the locations cited in the advert) or, when required for business reasons, in another office/work location/visiting stakeholders. Your designated workplace will be your contractual place of work. There may be occasions where you are required to attend above the minimum expectation.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).

Visa Sponsorship

DfTc does not offer Visa Sponsorship for this role.

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Delivering at Pace
• Managing a Quality Service

Technical skills

We'll assess you against these technical skills during the selection process: