Security Culture Lead - EXT

Job summary

Security and the management of information used for corporate and statistical activities is critical to business operations and the trust that citizens place in us. ONS has a strong commitment to protecting this information.

The last few years has seen an extensive overhaul of security and information management to meet the challenges of corporate and statistics transformation in technology, methods and practice, the Digital Economy Act and organisational risk appetite. The capability is evolving and expanding to address changes in threat and business direction.

The Security and Information Management (SaIM) directorate operates five key services across ONS: Security Risk Advice and Management; Knowledge and Information Management (KIM); Physical Security and Business Continuity; Security Compliance and Audit; and Cyber Security, including our Security Culture Services.

This role sits in the Security Culture division within SaIM, reporting to the deputy Chief Security Officer.

This campaign is for external candidates who wish to be based at either our Newport or Titchfield site. Therefore, this campaign has been linked with the internal advert 456665 Security Culture Lead. If you are an internal candidate to ONS please apply via the other campaign. The selection and interview process will be combined, so you do not need to apply to both campaigns.

Job description

You will aim to embed a strong security culture within ONS by delivering a holistic suite of activities to the organisation designed to improve security awareness and resilience.

This role works closely with colleagues across all divisions in SaIM, and with other business enabling functions, to deliver activities aligned to building the organisation’s security culture. These roles advocate security-positive behaviour to all ONS colleagues across various mediums.

Responsibilities

Effectively manage the delivery of security education. To include:

• Mandatory security education for the whole organisation; rolling out training, tracking and overseeing compliance (to include liaising with key stakeholders to identify/source/build relevant and engaging training and interpreting the compliance data as required to answer any queries).
• Phishing simulation campaigns; Collaborate with Cyber Security to design and launch simulations, perform analysis to assess staff behaviour changes. Determine key findings and present recommendations to CSO and Deputy CSO, interpreting the data as required to answer any queries.
• Review and approve bespoke security training sessions. Analyse engagement data in context of wider education programme, interpreting the data as required to answer any queries

Effectively manage the delivery of security awareness. To include:

• Collaborate with key stakeholders to deliver a Security Communications plan that ensures staff are regularly and appropriately informed of security events, issues or key topics.
• Optional security awareness activity, such as (but not limited to) annual Cyber Security Awareness Month engagements. Analyse engagement data in context of wider education programme.
• Provide confidence to key stakeholders, including senior stakeholders, on matters relating to the organisation’s security culture and awareness, to include the creation of written reports and analysis of key security awareness activity undertaken.
• Lead a successful programme which actively promotes a positive security culture and positive security behaviours, utilising available channels to share best practice across government, the public sector, and industry.

Person specification

Essential Criteria:

• Experience in participating in or leading a multi-disciplinary team, ideally within a large organisation and/or within the public sector, demonstrating ability to build and foster collaborative relationships with a diverse range of stakeholders and senior leaders within both the business and the wider organisation
• Experience of working within a complex or multi-layered security service.
• Demonstrates an understanding of the drivers of human behaviour, behaviour change models, and barriers to change. Ability to lead the application of behavioural and psychological principles to drive sustained security behaviour change.
• Experience in developing or improving a programme or process aligned to an overall security and/or information management strategy.
• Excellent written and verbal communication skills, to include ability to influence others towards a common goal. An ability to effectively tailor communications to an audience, ensuring they are appropriate and proportionate for the purpose.
• Knowledge of the UK Government approach to security, including the Government National Security Strategy and Cyber Security Strategy. Awareness of information assurance standards (for example, ISO 27001) and information legislation (for example, GDPR) and how principles within standards and legislation are applied in an organisational context.

Behaviours

We'll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Communicating and Influencing
• Making Effective Decisions
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Applied Security Capability (Working)
• Protective Security (Working)
• Threat Understanding (Working)

Benefits

Alongside your salary of £41,985, Office for National Statistics contributes £12,163 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

The Office for National Statistics is part of the Civil Service, and as such we share a number of key benefits with other departments, whilst also having our own unique offerings to support our valued colleagues across the organisation.

Whether you are hearing about us for the first time or already know a bit about our organisation, we hope that our careers site will give you a great insight into the benefits and facilities available to our colleagues, and our fantastic working culture.

We are committed to supporting our people’s well being by offering flexible ways of working that support a healthy work life balance. We are happy to explore opportunities with you about working flexibly in line with our hybrid working policies.

Inclusion & Accessibility

At ONS we are always looking to attract the very best people from the widest possible talent pool, and we are proud to be an inclusive, equal opportunities employer. As a Disability Confident Leader we’re committed to ensuring that all candidates are treated fairly throughout the recruitment process.

As part of our application process, you will be prompted to provide details of any reasonable adjustments to our recruitment process that you need. If you would like to discuss any reasonable adjustments before applying, please contact the recruitment team in the first instance.

If you would like an accessible version of any of the attachments or recruitment documents below or linked to in this advert, please contact the recruitment team who will be happy to assist.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

Security Clearance

For ONS the requirement for SC clearance is to have been present in the UK for 3 consecutive years immediately prior to applying and the department will consider eligibility by exception on a case-by-case basis. You will be asked to provide information regarding your UK residency during your application, and failure to provide this will result in your application being rejected.

If you are unsure that you meet the eligibility above, please read the information available on Gov.uk on this link, or contact the recruitment email on the advert before applying to discuss, as failure to meet the residency requirements will result in your security clearance application being rejected and any offer of employment being withdrawn.

At the point of SC application, you will need to provide or give access to the following evidence:

• Departmental or company records (personnel files, staff reports, sick leave reports and security records)
• UK criminal records covering both spent and unspent criminal records
• Your credit and financial history with a credit reference agency
• Security Services records

For full guidance in relation to the use of AI through the recruitment process, please read A candidate’s guide to artificial intelligence (AI) in recruitment

Please note that all campaigns may be subject to withdrawal at any stage if the internal resource position changes.

Application Process

Number of Stages: 2 stage process

Stage 1: Application

Stage 2: Interview

Stage 1 – Application

The assessment process at the application stage will be based on your work history, skills, experience, CV, and personal statement. It is important that your application is tailored to highlight the skills, knowledge, and experience relevant to the role.

A personal statement is required at application stage, the maximum wordcount allowed is 1,250, which should not be exceeded. You should provide evidence for each essential skill criterion listed in the person specification. As these criteria are scored, it is advisable to give clear examples for each one, including the impact of your actions, ideally utilising the STAR technique (Situation, Task, Action, Result).

Please note that Success Profiles Behaviour examples are not required at this stage of the application process.

When a high volume of applications are received, the sift pass mark may be adjusted. Candidates will be invited to interview based on their merit order, with those achieving the highest scores being prioritised. Applicants who score below the adjusted pass mark but still pass will be placed on hold and may be invited to interview at a later date.

Stage 2 – Interview

If invited to interview, you will be assessed using techniques aligned with the Civil Service Success Profiles framework, covering all behaviours listed in the job advert and any required technical skills.

A presentation may be required at interview.

Interviews may be in person or via Microsoft Teams.

A reserve list may be held for a period up to 12 months from which further appointments may be made.

The Sift will be conducted from 30/04/2026

Interviews will be conducted from 11/05/2026

For the full terms and conditions of the post, please see attachment.

Near Misses

We often have similar roles available at different grades. If a candidate is suitable for a similar role or a lower grade than they have applied for, we may offer the candidate that role without the need to go through a further selection process providing the role has the same behaviours and essential skills.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Government-Digital-and-Data-Recruitment@ons.gov.uk
• Email : Government-Digital-and-Data-Recruitment@ons.gov.uk

Recruitment team

• Email : Government-Digital-and-Data-Recruitment@ons.gov.uk

Further information

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance, you should contact recruitment.complaints@ons.gov.uk. If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission

Attachments

2721 Advert 1A Permanent - ONS London Inclusive v1-00 Opens in new window (pdf, 83kB)