Commercial Security and Information Assurance Lead

Job summary

The Cabinet Office and HM Treasury operate at the heart of the UK government. These iconic departments are responsible for ensuring the effective running of government, maintaining control over public spending and working to achieve strong and sustainable growth for the UK.

The Cabinet Office & HM Treasury (COHMT) Commercial team has a vision to be a top performing commercial function in government, setting best practices for others to follow. It offers a unique challenge to commercial professionals who want to work on some of the UK’s most important policy issues. The team works in partnership with all areas of the business, providing a commercial service that covers planning, commercial strategy, sourcing and contract management on circa £1bn of third party spend.

We are looking for an experienced Information Assurance/Cyber Security professional to join the team. This role will be responsible, alongside the Head of Commercial Information Assurance, for working with Business Units and the Commercial Team to ensure that Cabinet Office contracts have proportionate and robust contractual security requirements included in each procurement and that security elements of large contracts are successfully managed. This role will be challenging and hands-on, and will require expert knowledge of security architectures, information assurance and information risk management. Some knowledge of commercial processes and supply chain management from a security perspective is desirable.

You'll support the Head of Commercial Information Assurance to deliver secure outsourced services and systems. This includes providing specialist advice and expertise for risk management decision making by senior risk owners.

The role involves supporting both projects procured for Cabinet Office themselves and those procured by Cabinet Office for use by the rest of government. The role involves working closely with suppliers, commercial teams, legal advisors, and colleagues from across the public sector.

The post sits in the Commercial Directorate and reports to the Head of Commercial Information Assurance. This role will require close working relationships across all the Business Units in the CO and across HM Government to ensure departmental and cross departmental information risks are assessed and effectively managed. This specialist role requires technical cyber security and risk management skills and knowledge. This role can be based in London, York, Glasgow, or Manchester and allows for hybrid working arrangements with a minimum of 3 days in the office per week. An additional digital skills payment may be applied for with a technical skills assessment which is reviewed annually.

Job description

Key responsibilities include:

• Provision of Information Assurance advice to Cabinet Office procurements and projects/services for which Cabinet Office acts as the Authority for HMG.
• To ensure appropriate Information Assurance (IA) controls are applied by service providers to reduce the information risks to an acceptable level to the Cabinet Office.
• Review of supplier system security architectures and controls to determine likely effectiveness.
• Provide recommendations on risk acceptance to the Head of Commercial IA where outside of the Cabinet Office risk appetite
• Ensure appropriate contractual mechanisms are in place to ensure suppliers can be held to account to manage security effectively in order to protect Cabinet Office, civil servant and citizen data.
• Provide direction to commercial teams on the security requirements for projects/programmes. To include specifying and drafting security requirements to be included in procurement documentation, along with assisting programs with bid evaluations, supplier negotiations and contract management.
• Assist the Head of Commercial IA with providing instructions to internal or external legal counsel on the drafting and development of the security elements of contract suites.
• Assist projects/programmes with the risk assessment and mapping of technical, personnel, procedural and physical controls to reduce risks to a level acceptable to the Senior Risk Owner.
• Manage the security aspects of new and existing contracts throughout the project lifecycle to ensure security risks are managed to acceptable levels and in line with the contract clauses.
• Provide and document security advice to internal as well as cross-departmental projects and programmes in CO to effectively manage their shared risk management requirements.
• Provide security risk advice and support to the Project Manager/Board and the Senior Risk Owner, either in the Cabinet Office or the lead department.
• Take account of differences in customers' risk appetite and balance their business drivers against appropriate levels of security from a strategic HMG perspective.
• Work closely with other IA technical specialists and leverage their assistance when required.
• Reviewing security documentation and technical security architectures provided by suppliers.

Person specification

Essential criteria

• Have sound knowledge and experience of assessing technical security architectures and technical security controls.
• Have demonstrable extensive experience of all aspects of Information Assurance and Information Risk Management.
• Have experience of dealing with a diverse group of stakeholders with sometimes conflicting security/business requirements.
• Have experience of engaging with senior personnel within the public and private sector.
• Hold a formal information security qualification such as an MSc in a related field, CISSP, or ISO 27001 Lead Auditor or be able to demonstrate equivalent knowledge and experience.
• Must be willing to undergo Security Check (SC) vetting.

Desirable criteria

• Knowledge of the security accreditation/assurance process for some higher classification projects.
• Have previous experience of working with suppliers and commercial teams to deliver the security elements of procurement within tight deadlines.
• Experience of assessing cloud security controls.

Additional information:

Cabinet Office policy is that a minimum 60% of your working time should be spent at your principal workplace. For some roles, due to their nature and the business need, this may be up to 100%. Requirements to attend other locations for official business will also count towards this level of attendance.

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Making Effective Decisions
• Delivering at Pace
• Seeing the Big Picture
• Managing a Quality Service

Technical skills

We'll assess you against these technical skills during the selection process:

• Security Architecture
• Cyber Risk Management
• Security Technology
• Information Security

Benefits

Alongside your salary of £59,207, Cabinet Office contributes £17,152 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• Learning and development tailored to your role.
• An environment with flexible working options.
• A culture encouraging inclusion and diversity.
• A Civil Service Pension which provides an attractive pension, benefits for dependants and employer contributions of 28.97%.
• A minimum of 25 days of paid annual leave, increasing by one day per year up to a maximum of 30.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

Application process

Please submit a CV and a 1250 word Statement of Suitability that outlines your suitability for the role and evidence against the Behaviours, Experience and Technical Skills set out in this advert.

Further details around what this will entail are listed on the application form.

Please provide a Statement of Suitability that outlines your suitability for the role, referencing the Essential criteria.

Should a large number of applications be received, an initial sift may be undertaken using the lead Behaviour, Communicating and Influencing.

Expected timeline (subject to change)

Expected sift date – w/c 23rd November 2026

Expected interview date/s – w/c 30th November 2026

Interview location - Your interview will either be conducted face to face or by video. You will be notified of the location if you are selected for interview.

Reasonable adjustments

If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.

If you need a change to be made so that you can make your application, you should:

• Contact Government Recruitment Service at: cabinetofficerecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
• Complete the ‘assistance required’ section in the ‘personal information’ page of your application form to provide information we should be aware of that will enable us to support you further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you're deaf, a Language Service Professional.

Further information

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'contact point for applicants' section.

Please note terms and conditions are attached. Please take time to read the document to determine how these may affect you.

Any move to Cabinet Office from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at: https://www.childcarechoices.gov.uk.

A reserve list will be held for a period of 12 months, from which further appointments can be made.

If successful and transferring from another Government Department a criminal record check may be carried out.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service/Disclosure Scotland on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

For further information on the Disclosure Scotland confidential checking service telephone: the Disclosure Scotland Helpline on 0870 609 6006 and ask to speak to the operations manager in confidence, or email Info@disclosurescotland.co.uk

Please note that this role requires you to undergo Security Check (SC) vetting, which would normally need 5 years UK residency in the past 7 years. This is not an absolute requirement, but supplementary checks may be needed where individuals have not lived in the UK for that period. This may mean your security clearance (and therefore your appointment) will take longer or, in some cases, not be possible.

For further information on National Security Vetting please visit the Demystifying Vetting website.

New entrants are expected to join on the minimum of the pay band.

This role is full time only. Applicants who wish to work an alternative pattern are welcome to apply however your preferred working pattern may not be available and you should discuss this with the vacancy holder before applying.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

Feedback

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Anna Brostromer
• Email : anna.brostromer@cabinetoffice.gov.uk

Recruitment team

• Email : cabinetofficerecruitment.grs@cabinetoffice.gov.uk

Further information

Appointment to the Civil Service is governed by the Civil Service Commission’s Recruitment Principles. If you feel that your application has not been treated in accordance with the Recruitment Principles, and wish to make a complaint, then in the first instance you should contact Government Recruitment Service by email at : cabinetofficerecruitment.grs@cabinetoffice.gov.uk
If you are not satisfied with the response you receive, then you can contact the Civil Service Commission at info@csc.gov.uk. For further information on the Recruitment Principles and bringing a complaint to the Civil Service Commission, please visit their website at: https://civilservicecommission.independent.gov.uk/.

Attachments

Cabinet Office Employee Offer Opens in new window (pdf, 302kB)Cabinet Office Terms and Conditions - External 2025-02-20 Opens in new window (docx, 83kB)