Job Description
Location: Birmingham, Leeds, Liverpool or London Canary Wharf (Hybrid Working)
Help Protect the UK's Health Security Through Cyber Risk Excellence
UK Health Security Agency (UKHSA) is seeking a Cyber & Corporate Risk Officer to join our growing Cyber Security team. This is an exciting opportunity to play a key role in strengthening cyber governance, risk management and assurance across an organisation that protects the nation's health security.
As part of our Cyber Governance, Risk & Compliance function, you will help provide a clear view of cyber risk across UKHSA, supporting informed decision-making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission.
This role offers a unique opportunity to develop expertise in cyber risk management within a complex and fast-paced organisation operating at the heart of national health security.
Security Clearance
This post requires successful candidates to achieve Security Check (SC) clearance before appointment.
To support the vetting process, applicants would normally have lived in the UK continuously for the previous five years. However, a shorter period of UK residency does not automatically prevent clearance being granted. Applicants with concerns regarding residency requirements should contact the recruitment team for advice.
About the Role
Reporting to the Senior Cyber Risk Officer, you will support the delivery of UKHSA's Second Line Cyber Risk Assurance function. You will provide independent oversight and challenge, helping ensure cyber risks are identified, understood and managed in line with UKHSA's risk appetite, government standards and public sector assurance expectations.
You will work closely with programmes and business areas, including specialist environments such as Industrial Automation and Control Systems (IACS) and the Harlow site, helping to create a consolidated view of cyber risk and ensuring appropriate escalation where required.
As a Second Line function, the team does not implement or operate cyber security controls. Instead, it provides assurance and supports leadership by:
- Ensuring cyber risks are identified, assessed and escalated appropriately
- Improving transparency, governance and organisational assurance
- Supporting UKHSA's ability to deliver essential health security services
Key Responsibilities
- Support UKHSA's Second Line Cyber Risk Assurance function, providing oversight and challenge of cyber and technology risks.
- Review cyber risk assessments, controls and mitigation plans, ensuring risks are accurately recorded and managed.
- Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches.
- Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums.
- Support cyber assurance activities across digital change programmes, cloud services and third-party suppliers.
- Contribute to audits, lessons learned, assurance reviews and continuous improvement initiatives.
- Build expertise in cyber risk management through ongoing learning and development.
About You
- Experience or strong interest in Cyber Risk Management, Information Security, Technology Risk, or GRC
- Awareness of cyber security threats, vulnerabilities, and controls
- Ability to analyse information and present risks clearly and concisely
- Strong written and verbal communication skills
- Willingness to provide constructive challenge while building effective working relationships
Knowledge of:
- Government Security Policy Framework
- Risk registers and assurance reporting
- DSPT Cyber Assessment Framework
- Industrial Automated Control Systems
Why Join UKHSA?
This role offers an opportunity to contribute directly to the UK's health security mission while developing valuable experience in cyber risk and governance. You will work alongside experienced professionals in a supportive environment, gaining exposure to a broad range of cyber security, assurance and risk management activities that have real national impact.
You will also receive:
- A generous Civil Service pension, with employer contributions averaging 28.97%
- Working on nationally significant technology services
- Exposure to complex, large-scale and diverse network environments
- Investment in learning, development and professional certifications
- A collaborative, supportive and inclusive culture
- Opportunities to influence the future of critical public sector technology
- Flexible working arrangements
Discover more about our rewards and benefits: Rewards and benefits – UKHSA | Civil Service Careers
This role closes on 14th September 2026 at 23.55