Track This Job
Add this job to your tracking list to:
- Monitor application status and updates
 - Change status (Applied, Interview, Offer, etc.)
 - Add personal notes and comments
 - Set reminders for follow-ups
 - Track your entire application journey
 
Save This Job
Add this job to your saved collection to:
- Access easily from your saved jobs dashboard
 - Review job details later without searching again
 - Compare with other saved opportunities
 - Keep a collection of interesting positions
 - Receive notifications about saved jobs before they expire
 
AI-Powered Job Summary
Get a concise overview of key job requirements, responsibilities, and qualifications in seconds.
Pro Tip: Use this feature to quickly decide if a job matches your skills before reading the full description.
Job Summary
The Ministry of Defence (MOD) Head Office, accommodated in Main Building, MOD’s flagship headquarters, provides the Department of State function and political and military strategic direction for the MOD.
This is an exciting new role within the Director Head Office business area, specifically within the Safety, Security, Business Resilience, Technology and Accommodation (SSBRTA) business unit. The main purpose is to oversee the safety, security and resilience of MOD Main Building, ensuring that staff within MOD Main Building can continue to deliver critical Defence outputs, in all foreseeable circumstances.
We are looking for an enthusiastic individual to work in the Head Office Cyber Security team, working across the whole of Defence, to deliver cyber security advice and support.
This position is advertised at 37 hours per week.
A Recruitment and Retention Allowance (RRA) of up to £9k per annum may be payable with this post, paid in increments upon reaching the required level of competence.
This allowance is not permanent, it is subject to an annual review to confirm whether there is a continuing business need, it can be increased, reduced or withdrawn at any time.
Job Description
As part of the Head Office Cyber Security team you will be required to implement Head Office’s response to Defence’s Cyber Security Strategy and Resilience programme. You’ll be involved in the work to understand Head Office’s Cyber security and resilience risk, ensuring the effectiveness of proposed mitigation against an evolving cyber threat. You’ll provide advice and guidance on Secure by Design (SbD), ensuring Head Office business units are compliant with MOD policy and lead on the implementation of Cyber Compliance Framework activities, driving forward improvements as required.
Liaising with the Head Office System Owners, the Directorate of Cyber Governance, Risk and Compliance, Defence Digital and other key stakeholders, you’ll ensure we are coherent with wider Departmental work / objectives. You'll represent the Cyber Team at departmental meetings, which may include attending the Cyber Resilience Oversight Board.
You may also be required to support the Principal Security Adviser and Security and Resilience Ops Lead to manage cyber security and resilience incidents. This may include managing crises that disrupt, or have the potential to disrupt, business in Main Building.
Responsibilities Include:
The Cyber Security Adviser will work closely with Cyber Security Lead to perform following responsibilities:
- Support Head Office (HO) IT systems and system owners in preparation for Cyber Compliance framework (CCF) audits based on NCSC and NIST framework to ensure security practices are compliant and overseeing any remedial activity.
 - Support HO governance structures to manage all cyber security risks and maintain up to date cyber risk register.
 - Act as cyber security support consultant and Security Assurance Coordinator (SAC) with respect to any new IT projects, ensuring that Secure by Design (SbD) is embedded in system design and configuration from the outset.
 - Provide assurance support to Head Office, Defence Digital and Cyber Defence & Risk by supporting risk assessments and cyber vulnerability assessments with system owners and Defence Digital.
 - Liaise relevant Cyber and Security Incident teams to support and response to Head Office cyber security incidents.
 - Arrange meeting with HO’s System Owners as required and maintain cyber meeting minutes note, and monitor daily cyber security communications group mailbox to maintain constant awareness.
 
Liaising with the Head Office System Owners, the Directorate of Cyber Governance, Risk and Compliance, Defence Digital and other key stakeholders, you’ll ensure we are coherent with wider Departmental work / objectives. You'll represent the Cyber Team at departmental meetings, which may include attending the Cyber Resilience Oversight Board.
You may also be required to support the Principal Security Adviser and Security and Resilience Ops Lead to manage cyber security and resilience incidents. This may include managing crises that disrupt, or have the potential to disrupt, business in Main Building.
Responsibilities Include:
The Cyber Security Adviser will work closely with Cyber Security Lead to perform following responsibilities:
- Support Head Office (HO) IT systems and system owners in preparation for Cyber Compliance framework (CCF) audits based on NCSC and NIST framework to ensure security practices are compliant and overseeing any remedial activity.
 - Support HO governance structures to manage all cyber security risks and maintain up to date cyber risk register.
 - Act as cyber security support consultant and Security Assurance Coordinator (SAC) with respect to any new IT projects, ensuring that Secure by Design (SbD) is embedded in system design and configuration from the outset.
 - Provide assurance support to Head Office, Defence Digital and Cyber Defence & Risk by supporting risk assessments and cyber vulnerability assessments with system owners and Defence Digital.
 - Liaise relevant Cyber and Security Incident teams to support and response to Head Office cyber security incidents.
 - Arrange meeting with HO’s System Owners as required and maintain cyber meeting minutes note, and monitor daily cyber security communications group mailbox to maintain constant awareness.
 
Due to the nature of the role, this post is open to Sole UK Nationals only.
We are committed to encouraging and enabling our staff to develop in and above their role and we will support you in undertaking further learning and development opportunities, within your designated field and beyond. Wherever possible, we will provide up skill learning options and further training to support your continuous professional development.
Essential Criteria
- Uses standardised Cyber Security Control Frameworks such as NIST CSF 2.0, NCSC CAF, ISO 27001 appropriately, with an awareness of their strengths and limitations.
 - Ability to communicate effectively to a variety of audiences, distilling information to portray key messages and facilitate effective decision making.
 - Proven experience in risk management including communicating risk to technical and non-technical stakeholders.
 - Uses local and strategic threat information in decision making and planning.
 - Awareness and enthusiastic in cyber security developments, current trends, analysis.
 - Understanding of the systems and basic-level architecture which underpin corporate IT systems and the techniques deployed to compromise these assets.
 - Practitioner Level experience of Information risk assessment and risk management
 - Working Level experience of Protective security
 - Working Level experience of Threat understanding
 
- Experience of using a variety of analytical tools and methods to identify security compromises within large and complex data sets.
 - Understanding of digital forensics, skills, techniques and tools to perform forensics and root cause analysis on enterprise IT systems.
 - Commitment to developing your professional competence.
 
Desirable Qualifications
- UK relevant Level 3 qualifications.
 -  Relevant UK industry qualifications/accreditation's e.g. Certified Information Systems Security Professional, Certified Information Security Management Principles, ISO 27001, etc.
 
-  Relevant HM Government qualifications or accreditation's e.g. NCSC Certified Cyber Professionals (CCP), etc.
 
We'll assess you against these behaviours during the selection process:
- Communicating and Influencing
 - Managing a Quality Service
 - Working Together
 
- Learning and development tailored to your role
 - An environment with flexible working options
 - A culture encouraging inclusion and diversity
 - A Civil Service pension with an employer contribution of 28.97%
 
The post does not offer relocation expenses.
External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.
Please Note: Expenses incurred for travel to interviews will not be reimbursed.
Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.
Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.
The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.
MOD Recruitment Satisfaction Survey – We may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Policy Notice sets out how we will use your personal data and your rights.
Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.
Candidates will be required to provide CV details to include job history; qualification details and previous skills and experience.
Candidates will be required to provide a Personal statement. (750 words)
At sift: you will be assessed against your CV and personal statement (max 750 words) stating how you meet the essential criteria for the role.
At interview: We'll assess you against these behaviours:
- Communicating and influencing
 - Managing a quality service
 -  Working together
 
Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
The Civil Service embraces diversity and promotes equality of opportunity. There is a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. If you need to advise us that you need additional help or reasonable adjustments for the recruitment process, please contact: [email protected] .
As a result of the changes to the UK immigration rules which came in to effect on 1 January 2021, the Ministry of Defence will only offer sponsorship for a skilled worker visa under the points based system, where a role has been deemed to be business critical. This role does not meet that category and we will not sponsor a visa. It is therefore NOT open to applications from those who will require sponsorship under the points based system.
Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.
The Ministry of Defence requires all candidates who are successful at interview to declare any outside interests. These declarations will be discussed with successful candidates following the interview process and before a formal offer of employment is made, as some outside interests may not be compatible with MOD civilian roles. This will not, in the majority of cases, prevent employment in MOD, but it is a measure that must be taken to ensure that appropriate mitigations can be put in place to manage any potential, perceived or actual conflicts of interest from the first day of employment.
The Ministry of Defence adopts a zero-tolerance approach to unacceptable behaviours, which includes bullying, harassment, sexual harassment, discrimination, and victimisation. You will not be eligible and will not be considered for this post if you have been dismissed from a role for such unacceptable behaviours within the last five years. This will also apply if you resign or otherwise leave a role but, because of an adverse decision, would have been dismissed for gross misconduct had you continued in that employment. Pre-employment checks will be carried out
Feedback will only be provided if you attend an interview or assessment.
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.
Security
Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
Open to UK nationals only.
Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).
This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
Job Contact :
- Name : [email protected]
 - Email : [email protected]
 
- Email : [email protected]
 
Please ensure you read the attached candidate information document prior to completing your application. If you are dissatisfied with the service you have received from DBS, or believe that DBS has failed to follow the recruitment process in line with the Civil Service Commission principles of selection for appointment on merit on the basis of Fair and Open competition, you can raise a formal complaint by writing to DBS at the following address: Defence Business Services, Scanning Hub, Room 6124, Tomlinson House, Norcross Lane, Blackpool, FY5 3WP. If after raising your complaint with DBS you remain dissatisfied you can complain directly to the Civil Service Commission at the following address: Civil Service commission, Room G/8, 1 Horse Guards Road, London, SW1A 2HQ Or by email: [email protected].
Key Skills
Ranked by relevanceReady to apply?
Join UK Ministry of Defence and take your career to the next level!
Application takes less than 5 minutes

