Cybercrime Insight Analyst Lead

The Cyber Crime Fraud team has a critical role to play in protecting the integrity of DWP systems from both internal and external threat actors. The team has detected significant organised attacks against DWP systems. Responding to increasingly sophisticated digital attacks by highly motivated attackers is a growing issue for the Department.

You will be part of an innovative and service-orientated team focused on the detection of cybercrime fraud attacks and malicious abuse of DWP systems.

Cyber Resilience Centre (CRC) provides support 24 hours a day, 7 days a week and as a result job holders may potentially be expected to work as part of an on-call rota, which may also attract occasional out of hours working. Work may involve travel to different DWP sites and Government agencies and occasional overnight stays.

This role will be transformational and will include overseeing the development of analysis teams with the ability and vision to use the latest analytical tools to generate groundbreaking and innovative fraud and security alerts. You will ensure the Department's data is used safely, proportionately and legally at all times.

The Cybercrime Insight Analyst Lead will focus on the delivery of innovation, application of insight and collation and assessment of intelligence surrounding Cybercrime threats to DWP Universal Credit, emerging DWP Digital services and legacy benefits.

The lead has a critical role to play leading, directing and managing a team protecting the integrity of our systems from both internal and external threat actors.

You will lead, manage and develop a team of analysts that is rapidly developing new skills and using the latest analytical tools. You will operate in a dynamic environment at the forefront of the Department's cyber protection capability.

Developing strong and effective working relationships with Data Scientists, Security Information and Event Management (SIEM) engineers and other data analysts to ensure emerging threats identified are fully assessed in terms of their potential impact.

Working discreetly on very sensitive issues ensuring information is shared and disseminated on a very strict need-to-know basis. You will have highly developed of political sensitivities and the nuances of effective communication across diverse areas of Government and at all grades up to a Ministerial level. If in doubt you will seek senior management input before disclosing information.

Leading on work to identify and address collusion between internal and external threat actors. This includes development of an effective rapid response process when an exploit is found, and attendance at incident case management meetings.

Using your knowledge of Government means tested benefits systems, fraud and security vulnerabilities to engage with and influence key stakeholders involved in the design and delivery of new and existing digital programmes to ensure the safeguarding of DWP services.

Working closely with the DWP Integrated Risk and Intelligence Service (IRIS) to understand the IRIS work plan end to end and how CRC fits into this, both in providing key capability and supporting key IRIS functions, as well as those of DWP Digital such as the Dynamic Trust Hub, and fraud case management system.

Representing the Cybercrime team in key IRIS meetings.

Successful candidates will have, or be expected to undertake, the BCS Certificate in Information Security Management Principle (CISMP) or equivalent qualification.