| Description: |
On behalf of DWP we are looking for a Senior Security and Fraud Risk Manager for a 12 month (Inside IR35) contract, hybrid working with up to 3 days per week in Manchester, Birmingham, Leeds or Newcastle.
PLEASE NOTE: An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.
This is a critical role co-ordinating and delivering a Digital security and fraud risk management programme of work, with risk driving delivery priorities. The role forms a vital first line capability within the HMG three-lines of defence model.
To be successful, you will require a unique combination of knowledge of Universal Credit and Working Age Services, citizen identity, counter fraud measures, business security practices and technical security including vulnerabilities, threat, secure design principles as well as personnel security.
You need to be able to interpret a range of sometimes conflicting technical and esoteric information and present it in a format that is understood by a wide range of audiences. They also need strong facilitation, interpersonal and negotiation skills. Reducing fraud is one of our core principles and therefore a priority activity.
Specifically, you will:
. Ensure that all areas identify fraud, information security risks, technical security risks and vulnerabilities, issues and incidents are identified, triaged, prioritised, actioned and continually managed within the risk management life cycle.
. Support and ensure consistency in approach for risk-informed decisions regarding prioritisation of deliverables, protection of assets and security architecture.
. Manage and lead the identification, assessment and remediation of business security/technical security/fraud risks.
. Identify, capture or contextualise risks, enabling risk owners and risk managers to take responsibility for the management and maintenance of their security and fraud risks.
. Work closely with business/technical security and fraud stakeholders contributing to the delivery of common goals.
. Work closely with delivery managers to design out fraud and minimise business/technical security risks at every level of design and delivery.
. Identify, assess and measure emerging business/technical security and fraud risks, or report to programme and senior stakeholders based on current trends and issues across DWP and the external environment.
. Provide risk expertise, advice and support to business managers, Senior Risk Owners and Executive Team Leads within UC/Working Age Services and the wider DWP.
. Ensure the implementation of the Governance Risk and Compliance methodology and day to day utilisation of the risk management toolset
Skills and Qualifications
Essential . Threat Intelligence and Threat Assessment experience.
. Certified Information Systems Security Manager (CISSP), (Certified Information Security Manager (CISM), Governance, Risk and Compliance Professional (GRCP) or an equivalent security qualification.
. Certified in Risk and Information Systems Controls (CRISC), or equivalent risk management qualifications, and/or proven knowledge of risk management - identification, assessment, risk response and mitigation, control monitoring and reporting.
. Practical experience of policy and criminal law (Nexus, Non-Repudiation, PACE etc.)
. Practical experience of negotiating with stakeholders at senior levels and translating business and strategic risk requirements into secure solutions through improvements in information systems, data management, practices and procedures.
. Experience and understanding of working with digital projects and of Agile project methodology. Please be aware that this role can only be worked within the UK and not Overseas.
Disability Confident
As a member of the Disability Confident Scheme, DWP guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
Armed Forces Covenant
DWP guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".  |
