Deputy Director - Chief Information Security Officer
Expression of Interest
Ministry of Justice
SCS Pay Band 1
Closes: 23:55 on Sunday 10th May 2026
About the Ministry of Justice
The Ministry of Justice is a
The Ministry of Justice (MoJ) works to
to uphold the rule of law at home and
major government department at
protect and advance the principles of
abroad; promote our world-leading legal
justice. Our vision is to deliver a world-class
services, which contribute to economic
the heart of the justice system.
justice system that works for everyone in
growth; and deliver accessible
We deliver some of the most
society.
and timely civil, family and
fundamental public services
The justice system plays a crucial role in
administrative justice.
our success as a nation - keeping people
including courts, tribunals,
safe, emphasising fairness, guaranteeing
For more information on who we are and
prisons, legal services, youth
individual rights and giving businesses
what we do, please
justice, probation services, and
confidence to flourish.
visit: https://www.gov.uk/government/organi
The delivery of our three strategic
sations/ministry-of-justice
attendance centres.
outcomes are central to doing this:
• Punishment that cuts crime: to rebuild
confidence in the criminal justice system
by protecting the public and reducing
reoffending with a sustainable and
effective prison and probation service.
• Swifter justice for victims: to rebuild
confidence in the criminal justice system
by ensuring timely, just outcomes for
victims and defendants through a
modern and efficient criminal courts
system.
• A beacon for justice and the rule of law:
About the role
The Role
information, to sophisticated criminal
groups pursuing financial gain through
Job Title
As the Chief Information Security Officer
ransomware and data theft, to those aiming
(CISO) for the Ministry of Justice, you will
Deputy Director - Chief Information
to disrupt public services. These challenges
step into a critical strategic leadership
Security Officer
are intensified by our large operational
position, providing authoritative direction,
Location
footprint, the presence of legacy systems,
oversight and assurance for cyber and
and interconnected dependencies across
National
technology security across one of the UK
the wider justice system. You will ensure
government’s most complex and high-risk
Please note the requirements for travel and
these risks are rigorously identified,
departmental environments. As the MoJ
level of flexibility available as set out in the
proactively managed and clearly
continues to embed advanced technologies
FAQs section.
communicated to senior leaders, enabling
including artificial intelligence and modern
robust cyber resilience across the
Salary
digital platforms, to transform the delivery
department.
of justice services, you will set expectations
The salary for this role is set within £81,000
and provide assurance that these
In this position, you will lead a cyber
- £117,800 which falls inside the MoJ SCS
advancements are introduced safely,
security function responsible for policy,
PB1.
responsibly and securely, protecting the
assurance, incident coordination, security
Existing Civil Servants will be appointed in
public, MoJ staff and the integrity of our
culture and specialist advisory support
line with the Civil Service pay rules in place
essential services.
across the organisation, leading a team of
on the date of their appointment.
specialists and managing an annual
In this role, you will focus on navigating an
Contract Type
budget. You will shape departmental cyber
increasingly adversarial cyber threat
strategy, influence executive
This is an Expression of Interest role for a
landscape. The MoJ is regularly targeted
decision-making and represent the MoJ
period up to 9 to 12 months.
by highly capable malicious actors seeking
across government.
access to sensitive government
You will provide independent scrutiny of
policy, embedding strong cyber
cyber and technology risks are
cyber risk, set policy and control
capability across all services.
clearly articulated, prioritised and
expectations, assure their implementation
• Set and maintain the organisation’s
evidence-based; provide
and lead senior-level responses to major
cyber security policy framework and
high-quality, evidence-backed,
cyber incidents. Your leadership will be
control expectations. Define security
analysis and reporting for senior
pivotal in safeguarding the confidentiality,
outcomes, maintain clear separation
leaders; and support informed
integrity and availability of MoJ systems
between policy, standards and
decisions on cyber risk, resilience
and information, ensuring that the
guidance, and establish
and investment priorities.
organisation remains resilient, secure and
proportionate and effective
• Lead senior responses to major
fully capable of delivering trusted justice
assurance mechanisms to assess
cyber incidents and strengthen
services to the public.
whether these expectations are
organisational resilience. Provide
being met, and escalate where they
You will proactively contribute as part of the
senior leadership and coordination
senior leadership team for Security and
are not.
during significant cyber incidents
Information Directorate and wider Service
• Deliver independent oversight,
and issues, supporting operational
Transformation Group, contributing to their
scrutiny and challenge of cyber and
decision-making and escalation, as
strategic direction.
technology risks. Act as the
well as post-incident improvement
department’s second line of defence
activities.
Key Responsibilities
by objectively assessing risk
• Build strong collaboration across the
• Provide strategic leadership and
management practices, challenging
justice system and government
direction for cyber security across
delivery teams where required,
cyber community. Maintain
the organisation. Oversee a
ensuring risks are accurately
productive relationships with internal
specialist cyber security function of
understood and mitigated, and
delivery teams and agencies,
around 45 staff, shaping long-term
escalating significant concerns for
represent the organisation in
strategic direction, evolving cyber
appropriate governance intervention.
cross-government cyber forums,
strategy in line with government
• Improve transparency and quality of
engage with national partners such
cyber risk information to support
as NCSC and GCU, and influence
executive decision-making. Ensure
cross-government information
align the portfolios and collaborate
security initiatives to ensure
on cross-cutting issues.
departmental risks and priorities are
recognised.
• Define and monitor performance
against standards, KPIs and targets
to ensure legal compliance is
achieved and maintained across
MoJ and its Executive Agencies and
the reputation of the department is
maintained in the eyes of Ministers,
the public and employees in all
related matters.
• Manage an annual budget of
approximately £5m and be
responsible for ensuring
expenditures remain within
departmental spending limits to
deliver a good, value for money,
service.
• Collaborate as part of the Senior
Management Team for Security and
Information Directorate, supporting
the Director and helping to shape
the culture of the Group and working
with the other Deputy Directors to
Person Specification
within a large, complex organisation,
analysis, reporting and advice that supports
including managing multidisciplinary teams,
informed executive-level decision-making
substantial budgets and contributing to
on resilience, risk mitigation and
wider organisational strategy, planning and
investment.
performance.
• Extensive experience leading senior
• Proven experience developing, maintaining
responses to major cyber incidents,
and implementing cyber security strategies,
coordinating cross organisational activity,
policies and control frameworks, ensuring
making evidence-based decisions under
alignment with national standards,
pressure, and embedding lessons learned
government requirements and industry best
to enhance resilience.
It is important through the recruitment
practice.
• Experience operating or establishing a
process that you give evidence and
• Demonstrable experience delivering
second line of defence cyber security
examples of proven experience of each of
the selection criteria detailed. You will be
independent oversight and challenge on
function, ensuring delivery teams retain
informed which criteria are being assessed
cyber and technology risks, including
ownership of risk while security provides
at which stage later in this pack.
operating as part of a formal risk
independent oversight and challenge.
management structure (e.g. first/second
The successful candidate will be able to
line of defence) and escalating material
Desirable:
demonstrate:
risks to senior governance bodies.
• Experience of modern cloud and platform-
Essential Experience:
• Strong track record of improving
based architectures, including public cloud,
organisational cyber risk transparency,
identity and access management, and
• Significant experience providing strategic
including producing high-quality risk
secure delivery practices
leadership for cyber security functions
The Recruitment Process
Application
contact you to arrange the next stage of the
● Changing and Improving
selection process.
To apply for this post, you will need to
After the Panel Interview
complete the online application process no
Panel Interview and Presentation
later than 23:55 on Sunday 10th May 2026.
Following the interview, the performance of all
You will be invited to attend an interview and
candidates will be reviewed, and the
The application must include:
presentation with the selection panel. You will
successful candidate identified. All candidates
be asked to prepare a verbal 5-minute
will be notified of the outcome as soon as
• A CV setting out your career history,
presentation based on a topic that will be
possible after the conclusion of all interviews
highlighting specific responsibilities and
provided in advance. The interview and
achievements that are relevant to this role
presentation will last for approximately 60
and relevant achievements in recent posts. minutes.
• A Personal Statement (no more than 1000 Interview
words) explaining how you consider your
What is being assessed?
personal skills, qualities and experience
provide evidence of your suitability for the
The following Behaviours will be assessed at
interview:
role, with particular reference to the
essential criteria in the 'person
● Communicating and Influencing
specification' section.
● Leadership
After the Application Stage
● Seeing the Big Picture
You will be advised whether your application
● Working Together
has been shortlisted for the next stage of the
selection process. If you are shortlisted, we will ● Managing a Quality Service
FAQ’s
Can I apply if I am not currently a
Collaboration Centres and Justice Satellite
Recruitment on scsrecruitment@justice.gov.uk
civil servant?
Offices are, to identify where you may be
before submitting your application.
based.
No. This role is only suitable for existing civil
servants and those in accredited Non-
Relocation costs will not be reimbursed.
Departmental Bodies.
Will this role require travel?
Is this role suitable for part-time working?
Some travel may be required for this role.
This role is available for full-time or flexible
Infrequent travel to London may be required.
working arrangements (including job share
partnerships).
Can I claim back any expenses incurred
during the recruitment process?
If you wish to discuss your needs in more
detail, please get in touch with the SCS
Unfortunately, we will not be able to reimburse
Recruitment Team
you, except in exceptional circumstances.
scsrecruitment@justice.gov.uk.
Is security clearance required? Yes. If
Where will the role be based?
successful you must hold, or be willing to
obtain, security clearance to DV level. More
The base location of this post is flexible and
information about the vetting process can be
can be based at any of our buildings across
found here.
England and Wales.
What should I do if I think that I have a
The MoJ is working to open more Justice
conflict of interest?
Collaboration Centres and Justice Satellite
Offices over time. Click here to learn more
If you believe that you may have a conflict of
about where our currently open Justice
interest, you must declare it by contacting SCS
Expected Timeline
We will try and offer as much flexibility as we can, but it may not be possible to offer alternative dates for assessments or interviews. You are
therefore asked to note the below timetable, exercising flexibility through the recruitment and selection process, in order to meet the dates
given. Please note that these dates may be subject to change.
The anticipated timetable is as follows:
Advert Closing Date
23:55, Sunday 10th May 2026
Interviews
w/c 18th May - w/c 25th May 2026
Contact us
Should candidates like to discuss the role in more detail before
submitting an application, please contact SCS Recruitment on
scsrecruitment@justice.gov.uk.