Apply before
24/08/2026, 23:55
Reference number
1072
Salary
£70,179
London weighting allowance (Per Annum)
£4,379
Role grade
G2
Contract type
Permanent
Command
Threat Leadership
Business Area
National Cyber Crime Unit (NCCU)
Type of role
Governance, Policing, Policy, Risk Management, Senior Leadership, Strategy
Working pattern
Full time, Part time, Flexible Working, Job share
Number of roles available
1
Senior Manager - National Cyber Crime Unit Strategy
Location(s)
Birmingham, Bristol, London, Warrington
About the Role
Information about the Command
Threat Leadership is responsible for the national response to the Serious Organised Crime (SOC) threats. Our role is to work with partners both inside the NCA and externally to set the strategic direction, facilitate effective delivery of the response, and ensure we understand the impact of our activity. Adopting a threat-led and intelligence driven approach, we identify emerging challenges and changes to the threat landscape. A key objective is to tackle SOC threats by maximising the benefit of new capability across the system. This approach means we can achieve more with the resources we have and be more effective developing business cases to enhance our response.
Driving the multi-agency UK 4P (PURSUE, PREVENT, PROTECT, PREPARE) response by agreeing threat priorities, influencing tasking of operational activity across law enforcement, facilitating partner action and informing policy, regulatory and legislative changes to better protect the public. Threat Leadership leads the national response for Organised Immigration Crime (OIC), Modern Slavery and Human Trafficking (MSHT), Drugs, Firearms, Child Sexual Abuse (CSA) and Borders. Threat Leadership is also home to the National Cyber Crime Unit, which combines Cyber threat leadership with an operational response.
Information about the Business Area
National Cyber Crime Unit (NCCU) is the UK lead for tackling the threat from cyber crime - a single Unit with the responsibility and capability to deliver operations, lead the overall UK response, coordinate activity across a range of partners, and provide specialist cyber support and expertise across law enforcement.
Role Summary
This is a high profile and exciting opportunity to join the NCCU Threat Leadership Strategy function. You will be at the heart of shaping the response to the cybercrime threat both within the NCA and beyond, leading your team to deliver key governance functions as well as directing and influencing tasking to mitigate the threat. It is a role requiring a strategic outlook, strong interpersonal skills with a range of stakeholders, and the ability to deliver quickly, accurately and collaboratively.
Role Description
The Threat Leadership function within the National Cyber Crime Unit comprises the Strategy, Performance & Impact, and 4P Hub teams. The Strategy team is responsible for shaping and
driving the strategic direction across Team Cyber UK; better enabling us to tackle the cybercrime threat. It does this through four core functions: Development and maintenance of threat understanding and strategic response frameworks (National Control Strategy & Strategic Action Plan); HMG Engagement including advocating for legislative reform; Coordination with International Partners and overseeing Briefings for NCA and other seniors. As G2 Senior Manager, you will work closely with a range of partners, including law enforcement, Government and private sector, to plan, coordinate and drive delivery of the cybercrime response.
Duties and Responsibilities
Duties & Responsibilities Overview
Drive NCCUs engagement across Government (HMG) to ensure
cybercrime policy, legislative frameworks, and strategic responses align with national security, HMG and SOC priorities. Leading engagement with the Home Office, NPCC and HMG stakeholders. Advocating for legislative and regulatory reforms to enhance cybercrime enforcement. Representing NCCU at national strategic forums. Monitoring and reporting on cyber threats to inform government decision making. Collaborating with partners and industry stakeholders to ensure alignment on cyber threat responses.
Strategically position the NCCU with global partners to enhance collaboration
against serious organised cybercrime (SOC) targets. Developing and maintaining a prioritised list of countries for engagement based on threat impact and feasibility. Creating country-specific plans outlining collaboration objectives, mechanisms, and key stakeholders and monitoring performance against those plans. Coordinating international visits and engagements, ensuring alignment with NCCUs Threat Response. Liaising with CILOs and NCA International teams and HMG to align global efforts. Arranging and conducting international visits in order to progress the Strategic objectives of the NCCU and develop opportunities, relationships and understanding. Developing the NCCU’s contribution to International forums, and supporting DD NCCU to further ambitions for international collaboration. This includes forums
such as International Pillar Meeting (IPM), Counter Ransomware Initiative (CRI), Cybercrime9 (C9) and FVEYs Law Enforcement Group (FELEG), Joint Cyber Action Taskforce (J-CAT) and EMPACT.
Inform, influence and advise seniors through delivering high quality, strategic briefings to internal and external stakeholders (including media
engagement/coordination). Preparing and delivering strategic briefings for government officials, senior leadership, industry partners, and law enforcement agencies. Collating intelligence and operational updates to ensure briefings remain current and impactful. Ensuring clear, consistent messaging that informs and influences decision making. Maintaining NCCU core narrative, structured briefing templates and processes for efficiency. Inform, advise and influence the strategic direction by providing high-quality, strategic briefings to internal and external stakeholders (including media engagement/coordination). Ensure NCCU provides consistent and accurate messaging whilst maintaining operational security both internally and externally
Develop, maintain, and govern the cyber contribution to the
National Control Strategy (NCS) and ensure delivery against the Cyber Strategic Action Plan (SAP) to drive an effective response to cyber threats. Establishing clear threat response frameworks in collaboration with NCCU and TCUK subject matter experts (SMEs) for inclusion in the NCS. Developing and driving activity against the SAP, ensuring it remains consistent with the NCS and provides clear direction on the required response – holding deliverable owners to account. Coordinating and driving senior governance meetings to oversee SAP and strategic priorities. Guiding the approach to strategic cyber assessments, including National Strategic Assessment (NSA) and National Intelligence Requirements (NIRs). Providing governance oversight and assurance at senior-level forums. Influencing Agency strategy through engagement with NCA Strategy teams. Engaging with Delivery Hub leads, operational teams, and intelligence units to ensure strategic alignment and communicate strategic direction. To ensure strategic resources are allocated effectively, the team will review the SAP in consultation with threat SMEs, regional/network leads and NCCU leadership, ensuring the SAP remains aligned with national priorities.
Leadership Lead your teams effectively by remaining flexible, agile and open in thought and action. Providing oversight of national strategies and action plans, ensuring that they align with strategic objectives, through established governance structures.
People development Being passionate about diversity and developing people inclusively, strengthening their ability to deliver and enabling them to grow in their roles and careers. You will actively coach and engage people, building their resilience through supporting them in their roles and enabling their wellbeing.
Decision-making Being threat-led and data-driven in decision making, identifying and utilising data streams to inform on unit posture and to enhance evidence based decision making. Navigating team members through ambiguity by making evidence and/or values-based decisions to prioritise strategically. Being proactive and ambitious on efficiencies, finding opportunities to remove duplication and standardising and simplifying where possible. Doing so, you will balance financial and people resources to deliver against changing priorities.
Person Specification
Skills, Knowledge and Experience Description
Knowledge of the serious and organised crime (SOC) system Good knowledge of the serious and organised crime (SOC) system – in particular cybercrime and/or online crime – including partnership working, law enforcement processes and disruption opportunities.
Negotiating and Influencing Ability to influence tasking decisions and to broker resource internally and externally.
Communication skills Strong report writing and presentation skills.
Interpersonal skills Excellent interpersonal skills with experience of working in partnership with internal and external stakeholders to progress complex work.
Effective decision making Experience in effective decision-making, demonstrating accountability and good judgement.
Seeing the bigger picture Understanding the strategic drivers for tackling the cyber threat and remaining cognisant of, and aligned with, wider NCCU and Agency priorities.
Leadership Ability to lead a team or group of colleagues/stakeholders to deliver an objective.
Delivering at pace Experience of working to tight deadlines and managing competing demands.
On-call working
This will be in line with current NCCU SLT on call rota
Essential Criteria
You must meet the essential criteria and evidence this within your application to be considered for the role.
Entry Requirements
Entry requirements: Skills, Knowledge or Experience Justification/Reasoning
Good knowledge of the serious and organised crime (SOC) system – in particular cybercrime and/or online crime – including partnership working, law enforcement processes and disruption opportunities. Knowledge of Serious Organised Crime (SOC) particularly cyber or online crime is essential before undertaking a senior cyber strategy management role due to the increasingly interconnected nature of modern criminality and national security threats. Cyber-enabled and cyber-dependent crime underpin a wide range of organised criminal activity, including fraud, ransomware, money laundering, child exploitation, and hostile state activity. A senior manager must understand how organised crime groups exploit technology, digital infrastructure, and online platforms to conduct and conceal criminal operations. This knowledge enables informed strategic decision-making, credible engagement with operational and intelligence partners, and alignment with national threat priorities. Prior understanding of SOC and cyber also ensures strategies are grounded in operational realities, legislative considerations, and evolving threat methodologies. Without this foundation, there is a risk that strategic direction may lack relevance, fail to address key threats, or overlook opportunities for disruption and prevention. Demonstrable knowledge of SOC particualrly cyber and/or online crime should therefore be considered a prerequisite for the role.
Any applications from candidates not meeting this eligibility criteria will not progress.
Salary
Allowances are reviewed annually and may be increased, decreased or removed.
All salary offers will be made in line with Remuneration Policy.
Roles based in London will receive an additional London Weighting (Per Annum) of £4,379
Benefits
All NCA employees are members of the UK Civil Service and eligible for the Civil Service pension scheme, alongside your salary the NCA contributes £20330. Further information on the benefits of the scheme is available on the Civil Service Pension Website.
New entrants to the NCA receive 26 days annual leave, rising to 31 on completion of 5 years continuous service, plus 8 bank holidays.
If qualifying criteria is met new joiners from UK Police Forces or the UK Intelligence Community (UKIC) will have service with those employers taken into account for continuous service purposes for annual leave entitlement only, this will be up to a maximum of 31 days leave (including 1 privilege day).
Other benefits include:
Flexible working, including flexi-time, compressed hours and job sharing (in line with business requirements)
Family friendly policies, notably above the statutory minimum
Learning and Development opportunities
Interest free loans and advances, including season tickets, childcare and rental deposits
Housing schemes - Key Worker status
Discounts and Savings with a wide variety of services including Cycle to Work, Smart Tech schemes, dental insurance, gym discounts and savings on everyday spending, available through the Reward Gateway | Edenred and Blue Light Card schemes.
Staff support groups/networks
Sports and social activities, including membership to the Civil Service Sports Council (CSSC)
Further information is available on the NCA Website.
Selection Process Details
This vacancy is using the Success Profiles framework and will assess using the following criteria: Behaviours, Experience
Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
How we will assess you
Your application will be assessed against the following:
Experience - This will be assessed:
Experience Criteria - will be assessed by 500 word examples on:
Experience of leading and managing a multi-disciplinary team.
Experience of effective decision-making, with internal and external scrutiny.
Experience of governance, project/programme management and/or performance management
A panel will assess how well your application demonstrates the requirements outlined above.
Longlist
In the event of a high number of applications, we may operate a longlist. Applicants will need to meet the minimum pass mark for the lead criteria.
- Experience of leading and managing a multi-disciplinary team. .
Candidates who do not meet the minimum pass mark for the lead criteria will not progress to having their other criteria assessed. Applications must meet the minimum criteria to be progressed to the assessment stage.
You will receive an acknowledgement once your application is submitted.
We aim to have sift completed and scores released within 10 working days of the closing date of the advert. For high volume campaigns this timeframe may be extended.
Scores will be provided but further feedback will not be available at this stage.
For guidance on the application process, visit:
NCA Applying and Onboarding
Assessment 1
The format of this assessment will be Interview which will be tested on the criteria listed in the Success Profiles at Assessment section.
Additional assessment methods used alongside Interview
As part of the assessment process Presentation will be required to assess the criteria outlined below:
What challenges does the NCA currently face and what attributes are you bringing to help the Agency address these? (Behavior 3 - Seeing the big picture)
Success Profiles at Assessment
Behaviours
Leadership
Communicating and Influencing
Seeing the Big Picture
Experience
Experience of leading and managing a multi-disciplinary team.
Experience of effective decision-making, with internal and external scrutiny.
Experience of governance, project/programme management and/or performance management
Assessment Outcome
Outcomes will be communicated via the NCA recruitment portal.
If successful but no role is immediately available, you may be placed on a reserve list for 12 months.
Reserve lists can be used to fill similar role types across the Agency where the assessment criteria is considered a match by the recruitment team and the business area.
In the event of a tie at the assessment stage, available roles will be offered in merit order using the following order:
Lead criteria (behaviours/technical/experience)
If still tied, desirable criteria will be assessed (if advertised)
If still tied, application sift scores will be used
Feedback is provided only to those who attend an assessment.
You will be subject to vetting and pre-employment checks before appointment.
Once the vacancy closes, the advert will no longer be accessible. Please save a copy for your records.
We encourage all candidates to visit the NCA Careers Page for more information.
Eligibility, Pre-Employment Check and Vetting
Please see the NCA T&Cs and Privacy Policy (pdf) for details on how your data is handled.
If you are an internal candidate who has passed interview but is undergoing an internal investigation or have a written warning in place preventing a post move you may not be able to be posted until this investigation is concluded or restriction lifted.
Nationality Requirements
This role is broadly open to the following groups:
- UK nationals or dual nationals, where one component is British
Further information on nationality requirements
You will be required to participate in digital right to work and address checks as part of the recruitment process.
Security and Vetting
People working with government assets must complete baseline personnel security standard checks.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is DV Enhanced. All security clearances will be managed by the NCA.
For more information on security vetting please visit: UK Security Vetting guidance for applicants and Demystifying Vetting and see our vetting charter at: The Vetting Charter.
Vetting requirements - DV Enhanced
Prior to commencing the role, you will need to successfully complete DV Enhanced clearance and then achieve DV STRAP clearance within the first 12 months in post.
The requirement for DV Enhanced clearance is to have been present in the UK for at least 7 of the last 10 years.
To obtain DV STRAP you must be willing to undergo STRAP induction and must hold full UK nationality or dual nationality, where one component is British. Applications will be considered on a case by case basis.
Failure to meet the residency requirements will result in your security clearance application being rejected.
If the increased clearance cannot be obtained you will be moved to a role appropriate to your clearance level achieved on entry.
For further information on National Security Vetting checks please visit the following page Demystifying Vetting
Individuals will be required to undertake and pass a substance misuse test as part of pre-employment checks.
Occupational Health
Successful candidates will be expected to undertake an occupational health assessment. Depending on the role an in-person medical may be required in either London or Warrington. Unfortunately, travel costs will not be reimbursed.
Things you need to know
Multi Location
Where multiple locations are advertised, appointments will be made in merit order for each location.
Please indicate up to three location preferences clearly. Only your first three preferences will be considered. You may be allocated to any of the locations you select. If you decline an offer for a location you have selected as a preference, a further offer may not be made.
If you choose to reject an offer and no alternative preferred location can be offered, you will not be able to return to the process or be placed on a reserve list.
Only the advertised locations are available; any additional notes added to the application will not be taken into account.
Near Miss
If you meet the criteria for a lower grade, you may be offered that role if not appointable at the advertised grade.
Conversely, if found appointable at a higher grade but no posts are available, you may be offered a lower-grade role.
All offers are made based on merit.
Hybrid Working
The NCA supports hybrid working. The extent of remote working will depend on the role and can be discussed at the offer stage.
Reasonable Adjustments
We’re proud to be a Disability Confident Leader and an inclusive, equal opportunities employer.
We’re committed to creating a workplace where everyone can be their authentic self. If you’re neurodiverse, have a disability, or live with a long-term health condition, we encourage you to let us know about any reasonable adjustments you may need during the recruitment process.
If you experience accessibility issues with the advert or require reasonable adjustments, please contact our Recruitment Team at
[email protected] before the advert closing date.
Please ensure you complete the ‘Equal opportunities’ and 'Reasonable Adjustments' sections in the application form to inform us on what support you may need in the recruitment process.
For more on our Disability Confident commitment, visit Disability Confident Scheme | Civil Service Careers.
Visit NCA Benefits and Support for more details.
Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy
In order to monitor the effectiveness of the National Crime Agency's Diversity & Inclusion strategy, we require certain personal details about you on submission of your application for statistical and monitoring purposes only. Please note that this will be treated in confidence and will not impact your application.
This vacancy is part of the Great Place to Work for Veterans initiative.
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.
We recruit on merit through fair and open competition, in line with the Civil Service Commission's Recruitment Principles.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
If you believe your application has not been treated fairly, email:
[email protected] (quoting the vacancy reference).
If unresolved, you may escalate your complaint to the Civil Service Commission.
Working for the NCA
The National Crime Agency is a 24/7 organisation, and working patterns must support business requirements. Some roles may require you to respond at short notice or outside of core hours.
If preferable, alternative contract types may be available. Please review the green bar of this advert to view all available contract types for this role. Where Loan or Secondment options are available, these would be for existing Civil Servants (Loan) and applicants from accredited Non-Departmental Public Bodies (NDPBs) or any other employer (Secondment). Prior agreement to be released on a loan basis must be obtained before commencing the application process. In the case of Civil Servants, the terms of the loan will be agreed between the home and host department and the Civil Servant. This includes grade on return.
If you have any specific queries about the role that are not covered by the advert, please contact:
Name : Central Recruitment Team
Email : [email protected]