Overview
The risks facing government and the public sector mirror the scale and complexity of government. There are risks that exist in aggregate across government and the public sector, risks that need management to stop them impacting multiple areas or becoming a national security issue. Risk management across such a vast landscape of public organisations and supply chains, creates a significant and critical challenge to define who should be responsible for, and involved in, the management of cyber security and digital resilience risks.
The Head of Technology Risk is a pivotal leadership role at the heart of government’s digital and data function. You will lead the design, implementation and continuous improvement of the cross-government Technology Risk Framework helping departments and public bodies better identify, manage and report technology risks in line with government-wide standards and expectations.
You’ll shape the government’s position on systemic technology risk through the ability to articulate and escalate risk in areas like legacy IT, digital resilience, third-party risk and emerging technologies, and ensure senior leaders have the insight and capability they need to take informed action. You’ll work across central teams, departments and the risk profession to uplift maturity, develop reporting and create consistent approaches to setting appetite, managing controls and driving remediation.
This is a high-profile role offering the opportunity to work with senior officials, HMT’s Risk CoE and various boards to ensure the government’s digital services remain resilient, secure and sustainable.
This is a rare opportunity to lead the UK government’s approach to technology risk at scale. You’ll shape policy, frameworks and capability that impact every department, every citizen-facing service and the resilience of our critical national infrastructure.
If you care about building dependable digital services, and want to make a difference on a national level, this is the job for you.
Responsibilities
* Establish and lead the technology risk function, building a team to deliver the responsibilities below.
* Lead the development and rollout of the cross-government Technology Risk Framework, ensuring it aligns with government risk policy, standards and guidance.
* Work closely with the Head of Assurance to ensure the TRF is integrated with existing governance and assurance mechanisms, such as GovAssure, the scheme for assessing the cyber resilience of government's critical systems.
* Work closely with the Heads of Policy and Services to embed a smooth process for feeding technology risks into targeted policy and service interventions.
* Consult and advise on the management of cross-government technology risks, including cyber security and digital resilience, so that decisions can be made by government technology risk owners through appropriate governance.
* Create clear, consistent approaches to identifying, categorising and measuring technology risk including legacy IT, digital resilience, supply chain, and emerging technologies.
* Work with departments to improve their capability to assess, manage and report technology risks, including articulating, setting and monitoring risk appetites.
* Provide expert advice to senior leaders and boards on critical, systemic and aggregate technology risks.
* Coordinate with assurance, policy and operational leads to ensure technology risk is considered in decision-making and portfolio planning, using insights from data, assessments and engagement to drive accountability and investment.
* Represent GDS in cross-government forums, working closely with HMT, Cabinet Office, NCSC, GSG and other stakeholders to align technology risk management with wider risk, cyber and resilience strategies.
* Provide input on cross government risk processes such as the National Security Risk Assessment.
* Develop and support capability building across the risk profession, including training, guidance and peer learning.
#J-18808-Ljbffr