Skip to content

General Information

Salary
The national salary range is £35,335 - £37,847, London salary range is £40,014 - £42,859. Your salary will be dependent on your base location
Working Pattern
Full Time, Flexible Working
Vacancy Approach
External
Location
National
Region
National
Closing Date
09-Sep-2026
Post Type
Permanent
Civil Service Grade
HEO
Number of jobs available
1
Reserve List
12 Months
Job ID
21441

Descriptions & requirements

Job description

Cyber Security Risk and Assurance Practitioner (HEO)

The MoJ Information Security Team sits at the heart of the Ministry of Justice, enabling good security practices through the provision of security policies, guidance and education, by understanding cyber security risks from all parts of the Ministry of Justice and providing assurance to the departmental SIRO, the Permanent Secretary and other senior stakeholders that these risks are being effectively managed in the delivery of MoJ objectives.

The role of the Cyber Security Risk and Assurance Practitioner is to support the central MoJ Information Security Team in carrying out cyber security assurance, highlighting non-compliance with required standards and raise and communicate cyber security risks arising from control gaps.  

The team works across a diverse range of digital services, technologies and business functions to identify and understand cyber security risks and provide assurance that these risks are being managed appropriately in support of departmental objectives.

The role involves reviewing services and systems, analysing evidence, identifying risks and opportunities for improvement, and communicating findings to a wide range of stakeholders.

The Cyber Security Risk and Assurance Practitioner may also provide advice to others on good risk management practices to enable them to manage residual risk well, identify trends resulting from risk and assurance activities and use these to propose and deliver improvements to processes, policies and guidance, and enable senior team members to resolve tactical requests to the team.

All members of the team are expected to help develop the MoJ Security Function as a centre of excellence for the department and to contribute to building a brilliant and diverse team that is a welcoming place for all.

All members of the team are expected to contribute to developing the MoJ Security Function as a centre of excellence, helping to build a brilliant, diverse and inclusive team environment. The post holder will contribute across a variety of assurance, risk and governance activities, working collaboratively with colleagues to continuously improve security practices, processes and decision-making across the department.

Typical role expectations and responsibilities

Security Risk and Assurance

  • Deliver security assurance, governance and risk management activities across a range of digital services, technical platforms, projects, suppliers and business functions.
  • Assess the effectiveness of security controls and identify control gaps, risks and areas requiring improvement.
  • Provide evidence-based opinions and recommendations on cyber security risks and the adequacy of controls, supporting informed decision-making and proportionate risk management while enabling business outcomes.
  • Support the delivery of assurance activities across the department including assurance reviews, incident management, GovAssure and third party assurance and communicate findings in a clear and proportionate manner to stakeholders.

Review, Analysis and Investigation

  • Conduct detailed reviews of digital services, business processes and technical solutions to understand how security and risk management requirements are being implemented in practice.
  • Gather, validate and analyse evidence from multiple sources to identify risks, trends, themes, control weaknesses and examples of good practice.
  • Apply analytical and investigative skills to understand complex issues, challenge assumptions and determine underlying causes of identified risks or concerns.
  • Use data and evidence to support recommendations and prioritisation of security improvement activities.

Technical Understanding

  • Develop and maintain an understanding of modern digital technologies and how they are used within large organisations.
  • Develop an understanding of cloud platforms, enterprise technologies, applications and digital services, and use this knowledge to support assurance, risk and governance activities.
  • Translate technical concepts into language that can be understood by non-technical stakeholders.

Reporting and Stakeholder Engagement

  • Produce clear, concise and evidence-based reports, assessments, briefings and recommendations for technical and non-technical audiences.
  • Present findings confidently to stakeholders and support discussions relating to risk management, governance and assurance outcomes.
  • Build productive working relationships across the organisation and act as a trusted partner in supporting good security practices.
  • Contribute to submissions, reports and briefing materials for senior leaders and governance forums.

Process Improvement

  • Review assurance, governance and risk management processes to identify opportunities to improve efficiency, consistency and effectiveness.
  • Support the development and implementation of improvements to processes, guidance, reporting and ways of working.
  • Identify themes emerging from assurance and risk activities and use insight to drive continuous improvement.

Team Contribution

  • Support a broad range of work across the team and adapt to changing priorities and organisational needs.
  • Share knowledge, skills and experience with colleagues to improve team capability and resilience.
  • Collaborate effectively with team members and stakeholders to deliver collective outcomes.
  • Contribute to maintaining a positive, inclusive and supportive team culture.

About you:

You may come from a security, technology, risk, governance, assurance, audit, operational or analytical background. Most importantly, you will be curious, collaborative and comfortable working across a variety of topics and activities.

You will:

  • Have experience of working within a security, technology, risk, governance or assurance environment.
  • Be comfortable analysing information from multiple sources and forming evidence-based conclusions.
  • Have strong analytical, problem-solving and investigative skills.
  • Be able to review complex information and identify key risks, themes and opportunities for improvement.
  • Have good written communication skills and be able to produce high-quality reports, assessments and briefing materials.
  • Be confident engaging with stakeholders and explaining technical concepts to non-technical audiences.
  • Have an interest in technology and cyber security, including modern cloud and digital services.
  • Be adaptable and willing to contribute across a broad range of activities rather than specialising in a single area.
  • Be methodical, inquisitive and willing to challenge constructively where necessary.
  • Demonstrate attention to detail and appropriate discretion when handling sensitive or confidential information.

Behaviours

We'll assess you against these behaviours during the selection process:

  • Managing a Quality Service
  • Delivering at Pace
  • Communicating and Influencing
  • Making Effective Decisions
  • Changing and Improving

Technical skills

We may assess your current level of knowledge of cyber security and risk management during the selection process.

Additional Information

Working Arrangements & Further Information

The MoJ offers Hybrid Working arrangements where business need allows. This is an informal, non-contractual form of flexible working that blends working from your base location, different MoJ sites and / or from home (please be aware that this role can only be worked in the UK and not overseas). All employees will be expected to spend a minimum of 60% of their working time in an office, subject to local estate capacity.

Some roles will not be suitable for Hybrid Working. Similarly, Hybrid Working will not suit everyone’s circumstances. Arrangements will be discussed and agreed with the successful candidate(s) and subject to regular review.

For nationally advertised role: all successful candidates will be appointed to the nearest viable office nearest to their home postcode and on its respective pay scale.  This will be at either a HQ building (subject to desk allocation, a Justice Collaboration Centre (JCC) or a Justice Satellite Office (JSO) – See Map. All employees will be expected to spend a minimum of 60% of their working time in an office, subject to local estate capacity). 

For current MoJ employees, your base location will need to be changed to the nearest viable office (to your home postcode), either at a HQ building, JCC or JSO within the National Office Network and moved its location’s respective pay scale (any legacy arrangements/locations will need to be amended).

Some of MoJ’s terms and conditions of service are changing as part of Civil Service reform. The changes will apply to staff joining MoJ who are new to the Civil Service. Staff joining MoJ from other civil service employers will transfer onto the new MoJ terms if they are already on 'modernised' terms in their current post or onto 'unmodernised' MoJ terms if they are on 'unmodernised' terms at their current post. Details will be available if an offer is made.

MoJ candidates who are on a specialist grade, will be able to retain their grade on lateral transfer.

All candidates who are currently in receipt of Mark Time / Pay Protection should ensure they are familiar with the new policy on permanent and temporary promotion which can be found on the employee intranet.

Flexible working hours

The Ministry of Justice offers a flexible working system in many offices. Standard full time working hours are 37 hours per week. MoJ welcomes part-time, flexible and job-sharing working patterns, where they meet the demands of the role and business needs. All applications for part-time, flexible and job-sharing working patterns will be considered in accordance with the MoJ’s Flexible Working policy.

Benefits

The MoJ offers a range of benefits:

Annual Leave

Annual leave is 25 days on appointment and will increase to 30 days after five years’ service.

There is also a scheme to allow qualifying staff to buy or sell up to three days leave each year. Additional paid time off for public holidays and 1 privilege day. Leave for part-time and job share posts will be calculated on a pro-rata basis.

Pension

The Civil Service offers a choice of pension schemes, giving you the flexibility to choose the pension that suits you best.

Training

The Ministry of Justice is committed to staff development and offers an extensive range of training and development opportunities.

Networks

The opportunity to join employee-run networks that have been established to provide advice and support and to enable the views of employees from minority groups to be expressed direct to senior management. There are currently networks for employees of minority ethnic origin, employees with disabilities, employees with caring responsibilities, women employees, and lesbian, gay, bisexual and transgender employees.

Support

  • A range of ‘Family Friendly’ policies such as opportunities to work reduced hours or job share.
  • Access to flexible benefits such as voluntary benefits, retail vouchers and discounts on a range of goods and services.
  • For moves to or from another employer or moves across the Civil Service this can have implications on your eligibility to carry on claiming childcare vouchers. You may however be eligible for alternative government childcare support schemes, including Tax Free Childcare. More information can be found on www.GOV.UK or Childcare Choices. You can determine your eligibility at https://www.childcarechoices.gov.uk/.
  • Paid paternity, adoption and maternity leave.
  • Free annual sight tests for employees who use computer screens.

Working for the Civil Service

The Civil Service Code sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles. Should you feel that the recruitment process has breached the recruitment principles you are able to raise a formal complaint in the following order

As a Disability Confident employer, MoJ are committed to providing everyone with the opportunity to demonstrate their skills, talent and abilities, by making adjustments throughout all elements of the recruitment process and in the workplace. MoJ are able to offer an interview to disabled candidates who meet the minimum selection criteria, except in a limited number of campaigns.

For more information on applying for a role as a candidate with a disability or long-term condition, please watch our animated videos.

You will be able to request reasonable adjustments to the recruitment process within the application form. If you need additional help completing the application form, please contact the TBS Recruitment Enquiries Team.

Diversity & Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy.

A Great Place to Work for Veterans

The "Making the Civil Service a Great Place to work for veterans" initiative includes a guaranteed interview scheme to those who meet the minimum criteria to provide eligible former members of the Armed Forces with opportunities to secure rewarding jobs. Allowing veterans to continue to serve their country, and to bring highly skilled individuals with a broad range of experience into the Civil Service in an environment, which recognises and values your previous service in the Armed Forces.
For further details about the initiative and eligibility requirements visit: https://www.gov.uk/government/news/making-the-civil-service-a-great-place-to-work-for-veterans

Redeployment Interview Scheme

Civil Service departments are expected to explore redeployment opportunities before making an individual redundant. The MoJ is committed, as part of the Redeployment Interview Scheme, to providing opportunities to those who are 'at risk of redundancy'.

MoJ is able to offer an interview to eligible candidates who meet the minimum selection criteria, except in a limited number of campaigns. Candidates will not be eligible for the Redeployment Interview Scheme if they are applying on promotion.

Civil Service Nationality Rules

This job is broadly open to the following groups:

  • UK nationals
  • nationals of the Republic of Ireland
  • nationals of Commonwealth countries who have the right to work in the UK
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window) https://www.gov.uk/settled-status-eu-citizens-families
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
  • individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
  • Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window) https://www.gov.uk/government/publications/nationality-rules

Reserve list

A reserve list may be held for up to 12 months from which further appointments may be made for the same or similar roles.

Contact Information

MoJ:

If you require any assistance please call 0345 241 5359 (Monday to Friday 8am - 6pm) or e mail moj-recruitment-vetting-enquiries@resourcing.soprasteria.co.uk

Please quote the job reference: 21441

HMPPS

If you require any assistance please call 0345 241 5358 (Monday to Friday 8am - 6pm) or e mail moj-recruitment-vetting-enquiries@resourcing.soprasteria.co.uk

Please quote the job reference: 21441

Application form stage assessments

Experience
We will assess your experience for this role via the following methods
CV or Work History, Statement of Suitability
Statement of Suitability
Guidance for the Statement of Suitability
Please tailor your Statement of Suitability to clearly demonstrate how your experience meets the requirements of the role, providing relevant examples where possible. You may use the full word count available to fully evidence your suitability.
Evidence of Experience
CV or Work History, Statement of Suitability

Interview stage assessments

Interview Dates
We hope to hold interviews week commencing 7th September 2026
Behaviours
Managing a Quality Service
Delivering at Pace
Communicating and Influencing
Making Effective Decisions
Changing and Improving
Level of security checks required
DBS Standard
Security Clearance (SC)

Use of Artificial Intelligence (Al)

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action.  Please see our candidate guidance for more information on appropriate and inappropriate use.