As Head of Cyber Governance, Risk and Compliance (GRC) you will be playing a pivotal role in shaping the success of the Cyber function and service by ensuring that cyber security risks are monitored and managed and reported effectively on behalf and to senior stakeholders across DBT. You will lead a team of security specialists, sharing best practice widely across government, the public sector, and wider industry. The role holder will ensure the effective delivery of a Security Governance Risk and Compliance function for a complex delivery environment, with numerous third-party suppliers providing our technical services and will be responsible for setting the vision and strategy for cyber risk management, governance, and compliance within DBT. There is a strong focus on data analysis, risk assessment and reporting. You will also provide guidance to ensure ongoing confidence that fundamental organisational security measures and controls have been met. The Head of Cyber Risk, Governance and Compliance acts as an escalation point for business stakeholders and ensures that all cyber security standards, implementation governance, audits, and assurance activities are effectively managed. You will:

• Develop and implement the strategic direction for cyber risk management, governance, and compliance, leading the cyber risk management, policy compliance, and audit management activities.
• Oversee the identification, assessment, and mitigation of cyber risks. Develop risk management strategies and processes.
• Implement and maintain a governance framework to ensure transparency and accountability in decision-making. Conduct regular reviews to balance benefits, opportunities, costs, and risks.
• Ensure compliance with relevant regulations and standards, including GDPR. Monitor and update policies and procedures in line with changing regulations.
• Manage and conduct audits to ensure the integrity, availability, and confidentiality of information. Provide assurance to stakeholders through rigorous security testing and reviews.
• Build and maintain strong relationships with internal and external stakeholders. Communicate effectively with senior leadership and other departments across DBT and wider Government.
• Develop and deliver training programs to enhance the security awareness of employees.
• Ensure the seamless and successful delivery of cyber security services.
• Represent the cyber security function at a senior level and act as an escalation point for business stakeholders.
  
  Disability Confident
About Disability Confident A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to .

The Department for Business and Trade (DBT) has a clear mission - to grow the economy. Our role is to help businesses invest, grow and export to create jobs and opportunities right across the country. We do this in three ways. Firstly, we help to build a strong, competitive business environment, where consumers are protected and companies rewarded for treating their employees properly. Secondly, we open international markets and ensure resilient supply chains. This can be through Free Trade Agreements, trade facilitation and multilateral agreements. Finally, we work in partnership with businesses every day, providing advance, finance and deal-making support to those looking to start up, invest, export and grow. The Digital, Data and Technology (DDaT) directorate develops and operates tools and services to support us in this mission.