Cyber Security Consultant

Job summary

Can you identify cyber security risks and provide practical solutions?

Do you enjoy working with stakeholders to improve security outcomes and build resilience?

Have you gained experience in cyber security, risk management, security assurance or a related field?

If so, we’d love to hear from you!

As a Cyber Security Consultant, you will be part of the Cyber Security Services team, ensuring security risks are identified, assessed and managed across a range of business as usual (BAU) activities and supporting ongoing compliance.

Reporting to the Lead Cyber Security Consultant, the team is responsible for providing advice and guidance to IT workstreams delivering Driver and Vehicle Licensing Agency’s (DVLA’s) web services, liaising with other teams in the IT department, providing security architecture input to technical designs and solutions and acting as a source of advice and guidance to the cyber security team and the wider agency.

Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King’s birthday.
• Flexible working options where we encourage a great work-life balance.

Find out more about what it's like working at DVLA – Home , Civil Service Careers

Read more in the Benefits section below!

Job description

You will be an experienced cyber security professional who can:

• Apply your knowledge of cyber and information security.
• Assess risks to existing and proposed systems and technical solutions, and then devise risk management plans to address such risks.
• To a large degree manage your own time and resources to deliver the required outcomes.
• Be actively engaged in the major change programme being implemented at DVLA, including playing a role in solution evaluation and technology selection.
• Develop and maintain good relationships with a wide range of stakeholders.
• Work as part of a team to deliver cyber security services.
• Develop/progress your own skills and career and actively coach and develop others.

Your responsibilities will include, but aren’t limited to:

• Monitor the efficiency and effectiveness of the Cyber Security processes across the organisation and make recommendations for continual improvement.
• Pro-actively pre-empt and manage risks and issues, providing solutions and escalating as required.
• Provide timely subject matter expert advice and consultancy in accordance with HMG security guidelines and DVLA policy on IT and information security issues to DVLA staff and to the service provider.
• Be responsible for the production of relevant security documentation for DVLA systems in line with HMG Information Assurance guidance.
• Undertake ad hoc risk assessments in line with the agreed risk assessment methodology within agreed timescales in order to provide senior manager with the appropriate information to make information risk management decisions.
• Produce Security Management Plans for DVLA projects to agree security relevant activities for the lifecycle of the project.
• Ensuring that all IT teams follow cyber security processes and escalate any repeated non-conformity.

Great line management is important to us as an organisation, and we will equip and support line managers to develop the skills they need. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public.

For further information on the role, please read the attached role profile. Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process.

Open Sessions: Would you like to find out more about the role, the team and what it’s like to work in our department? If so, we are organising an open session where you can virtually 'meet the team' on Wednesday 20th August at 1:00pm. Sign up here.

Person specification

Qualifications/licenses:

• Professional information security certification – CISMP or similar, or willingness to attain.

Required experience:

To be successful in this role you will need to have the following experience:

• Experience in a Cyber Security or Information Security role.
• Solid knowledge of various information security frameworks.
• Problem-solving and analytical skills.
• Effective verbal and written communication skills.
• Broad understanding of cloud-based technical environment.

Working for the DVLA Digital Team

At DVLA, licensing is just the start. Every project you implement, touch and deliver has a ripple effect that’ll wash across the nation. Here the work you’re doing has the capacity to change the way 53 million people interact with our services. As we aim to keep our roads some of the safest in the world, our innovative, transformative digital-led services help optimise a nation of individuals and business every single day.

To see how our people are transforming our digital services, head over to our DVLA Digital Services Blog and, to understand more about the great opportunities and benefits of working at DVLA read our Inside DVLA blog.

Working hours, office attendance and travel requirements

Full time roles consist of 37 hours per week. Whilst we welcome applications from those looking to work with us on a part time basis, there is a business requirement for the successful candidate to be able to work at least 35 hours per week.

This role is suitable for hybrid working, which is a non-contractual arrangement where a combination of workplace and home-based working can be accommodated subject to business requirements.

The expectation at present is a minimum of 60% of your working time a month will be spent at either your designated workplace (one of the locations cited in the advert) or, when required for business reasons, in another office/work location. There may be occasions where you are required to attend above the minimum expectation.

If you have a question about hybrid working, part time/job share hours, flexible working, travelling for work, or require a reasonable adjustment, please contact the Vacancy Holder during the recruitment process to avoid possible disappointment later in the process should your working arrangements not be compatible with the requirements of the role (see below for contact details).

Security Check

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check. To allow for meaningful checks to be carried out, candidates will be required to have at least 5 years continuous residency in the UK. All applicants for this role must ensure that they meet this minimum residency requirement - if you do not, your application will be withdrawn.

Visa Sponsorship

Please note that we do not hold a UK Visa & Immigration (UKVI) Skilled Worker Licence sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship. Candidates must ensure they have the appropriate rights to work in the UK before application.

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Making Effective Decisions

Technical skills

We'll assess you against these technical skills during the selection process:

• Government Digital and Data Skills – Security technology (Working)
• Government Security Profession Skills - Applied security capability (Practitioner)
• Government Security Profession Skills - Information risk assessment and risk management (Practitioner)

Benefits

Passionate, reliable and always willing to push yourself and those around you, you’ll continue to seek improvement in your own role and challenge us too. Because we pride ourselves on how we approach your development. From training courses to specialist skills workshops and opportunities to grow your expertise, we thrive when you thrive. You can find out more about all of the above here alongside a full list of our benefits:

• Best in class learning and development tailored to your role.
• An environment with flexible working options where we encourage a great work-life balance.
• A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues.
• Generous employer contribution of 28.9%, depending on chosen pension scheme
• Flexible working options where we encourage a great work-life balance
• Digital communities with clear career frameworks.
• On-site gym plus personal training available (membership applies).
• On-site nursery, restaurants and coffee bar.
• 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Free parking.

Find out more about the benefits of working at DfT and its agencies(opens in a new window).

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

How to apply:

Our selection process ensures a comprehensive assessment of each applicant's qualifications, skills, and potential fit within our organisation.

The selection process for this role will be:

Stage 1: Sift of CV and personal statement

Stage 2: Interview

You must be successful at each stage to progress to the next stage.

Stage 1: Sift

At sift, you will be assessed against the following Success Profile elements:

Experience – you will be asked to provide a CV (unlimited wordcount) and personal statement (750-word count). Please provide evidence of your Experience of the following:

• Knowledge of the issues and techniques associated with securing a variety of technologies and a knowledge of the cyber security industry.
• A good understanding of risk, and risk assessment and management techniques.
• Delivering cyber security services within a business or organisation.

Should we receive a high volume of quality applications, we may invite a shortlist of the highest scoring candidates to interview. This means that some applications that meet the required standard could be placed ‘on hold’ after the sift and invited to interview if the vacant position(s) remain unfilled. You will be notified if your application is being put ‘on hold’ once the sift has been completed. Following interviews, any applicants remaining on hold will be notified by the panel of the next steps regarding their application.

The sift will take place week commencing 24/08/2026.

Stage 2: Interview

At interview stage, you will be assessed against the following Success Profile elements:

Behaviours –

• Leadership
• Making effective decisions

Technical -

• Government Digital and Data Skills – Security technology (Skill level: working)
• Government Security Profession Skills - Applied security capability (Skill level: Practitioner)
• Government Security Profession Skills - Information risk assessment and risk management (Skill level: Practitioner)

The interviews will take place week commencing 07/09/2026.

This interview will be conducted in person at our Swansea office (Longview Road Morriston, SA6 7JL). Further details will be provided to you should you be selected for interview.

Please note that we will try to meet the dates set out in the advert. There may be occasions when these dates will change.

Further information on the selection process

We will also hold a12-month reserve list for this role, which may lead to potential opportunities beyond the role you applied for.

Reasonable Adjustments

As a Disability Confident Leader employer, we are committed to ensuring that the recruitment process is fair, accessible and allows all candidates to perform at their best. If a person with a visible or non-visible disability is substantially disadvantaged, we have a duty to make reasonable changes to our processes.

Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need during the recruitment process. For instance, you may need wheelchair access at an interview, or if you’re deaf, a Language Service Professional.

If you need a reasonable adjustment so that you can complete your application, you should contact Government Recruitment Service via dftrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Document Accessibility

This job advert contains links to the application process. Our website provides useful guidance and information that can support you during the application process. If you are experiencing accessibility problems with any attachments on this advert or the information on our website, please contact the email address in the 'Contact point for applicants' section.

Further Information

For further information on National Security Vetting please visit the Demystifying Vetting website.

If your application is successful but you have been dismissed from the Civil Service, your application could be removed at the pre-employment checking stage depending on the nature of the dismissal.

Pre-employment Checking

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

All External applicants and current employees of accredited non-departmental public bodies (NDPBs) will be required to undergo a Social Media Check. A Social Media Check is a review of your publicly available online activity, typically across platforms like LinkedIn, Facebook, X (formerly Twitter), Instagram, and others. The purpose is to identify any public posts or content that could raise concerns for employers, such as:

Hate speech or discriminatory behaviour

Threats or acts of violence

Illegal activity or substance misuse

Sexually explicit material

Extremist views or affiliations

Importantly, this check does not involve hacking into your accounts or accessing private messages. It only considers content you have chosen to make public.

Employers use this kind of screening to help ensure their workplace remains safe, inclusive, and aligned with company values. It’s not about judging your personality or lifestyle—it’s about checking for potential red flags that might affect the role or company culture.

If you have questions or concerns about the social media check, we would be happy to explain in more detail what’s being looked at and how your data is handled securely and fairly.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a basic (or equivalent) criminal record check.Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : ITS Recruitment
• Email : ITSRecruitment@dvla.gov.uk

Recruitment team

• Email : dftrecruitment.grs@cabinetoffice.gov.uk

Further information

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance, you should contact Government Recruitment Services via email: dftrecruitment.grs@cabinetoffice.gov.uk
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: Visit the Civil Service Commission website Here

Attachments

DVLA Digital Job Brochure - V1 2025 Opens in new window (pdf, 2074kB)Role Profile Opens in new window (pdf, 243kB)