Government Digital Service

Location: Bristol, London, Manchester

Job grade: Grade 7

Contract type: Permanent

Working pattern: Flexible working, Full-time, Job share, Part time, Compressed hours

Salary: £58,775 - £74,915

Closing date: Wed 25 Nov 2026

Reference: 488991

Profession: Digital, Data & Technology

Cyber Risk Lead (Legacy Coordination and Assurance)

As Cyber Risk Lead (Legacy Coordination and Assurance) you will guide the delivery of legacy and assurance activity, translating the requirements of the Government Cyber Action Plan (GCAP) and Firmer Foundations programme into meaningful actions that drive legacy technology interventions and remediation across government.

This role will work across the Accountability and Assurance functions of the Government Cyber Unit (GCU), and the Firmer Foundations of the Office of the Chief Technology Officer (OCTO) – Digital Transformation, Government Digital Service. This role is not primarily a technical specialist or reporting role, it is a strategic integration role for someone who can understand digital, technology and cyber processes, connect workstreams, deliver requirements into delivery teams, and turn complex technical and programme information into clear advice and action to drive forward progress.

Specific Responsibilities To Include

- acting as the primary interface between the Accountability and Assurance functions of GCU, and OCTO on legacy-facing and relevant technology modernisation work
- developing strong working relationships across GCU, OCTO, Government Departments, Mayoral Strategic Authorities and wider stakeholders
- translating GCAP outcomes, accountability priorities and assurance requirements into practical requirements for legacy remediation delivery




- developing government’s understanding of legacy risk by bringing together insights from assurance activities, legacy remediation programmes, public sector engagement and broader governance activities
- identifying lessons emerging from successful legacy remediation and legacy reduction activity across the public sector and embedding them in programme delivery
- identifying opportunities for legacy technology interventions to support GCAP outcomes
- identifying where legacy technology risks intersect with wider cyber, operational and organisational risks, ensuring these connections inform policy, governance and assurance activity
- working with the Technology Risk Group (TRG) to align legacy technology initiatives with strategic risk priorities, agreed risk appetite approaches and wider technology risk management objectives

The post holder may be required to support out of hours on call rotas for responding to cyber and digital resilience incidents, for which renumeration and/ or flexible working arrangements will be available.

Person Specification

- demonstrate analytical and strategic thinking skills relating risk to corporate governance, organisational strategic direction and planning
- build strong relationships with stakeholders across teams, communicating tailored threat information to relevant stakeholders,



organisations and stakeholder groups
- identify connections, dependencies and opportunities across multiple workstreams
- translate and communicate complex information to technical and non-technical stakeholders, including senior leaders championing protective security within the wider security function
- demonstrate experience of governance, assurance and risk management and work on major cross-government programmes
- demonstrate knowledge of cyber security, digital transformation, technology risk or organisational resilience helping organisations to derive and reason their security needs

Recruitment Timeline

Sift completion: 2/12/2026

Panel interviews: Starting 9/12/2026

Candidates that do not pass the interview but have demonstrated an acceptable standard may be considered for similar roles at a lower grade.

A reserve list will be held for a period of 12 months, from which further appointments can be made.

About Government Digital And Data

Government Digital and Data is a community of experts leading digital transformation in government, creating more efficient services that have a meaningful impact on people’s lives.

The profession has technical specialists of all levels and backgrounds. They share a commitment to put users first and deliver world-leading government products and services.

Job roles within the profession range from trainee to Senior Civil Servants who lead on the very future of government itself.

Working in Government Digital and Data

Building the government of tomorrow: The UK government is recognised as a global leader in digital transformation. Government Digital and Data experts design, build a

📌 Cyber Risk Lead (Newmarket)
🏢 Civil Service World
📍 Newmarket