Vacancy Reference Number
22340
/*generated inline style */
Number of Vacancies
1
/*generated inline style */
(B) OCU
Digital, Data & Technology
/*generated inline style */
Location
Bow, Other
/*generated inline style */
Building
BOW CENTRAL COMMS
/*generated inline style */
Band
Band L
/*generated inline style */
Part/Full Time
Full Time
/*generated inline style */
Hours per Week
36 hours per week
/*generated inline style */
Type of Contract
Permanent
/*generated inline style */
Job Advert
Job Title: Senior Manager - Cyber Security Risk & Assurance
Salary: The starting salary is £71,121, which includes allowances totalling £3,009.
The salary is broken down as £68,112 basic salary, which will increase annually until you reach the top of the scale £72,953. Plus, a location allowance of £2,009 and a non-pensionable allowance of £1,000.
Location: London & Hybrid (60% / 3-days per week in office). The ‘home base’ Met location is Bow. We offer the flexibility to work in a Hybrid way, where you can deliver your best, including Working from Home (WFH). Travel across the Met Estate, to attend meetings as required by the business, is expected.
Policing London is a hugely complex challenge that evolves every day. To make sure the Met is up to the task, we need the right IT and systems across our organisation. As a Senior Manager – Cyber Security Risk & Assurance, you will help to enable us to do our best for the London area. Join us and play your part in making London the safest capital in the world and delivering ‘More Trust, Less Crime and High Standards’.
As a member of the Met, you will also enjoy great benefits including annual leave, civil service pension arrangements, maternity/paternity support, as well as being part of a continuous learning culture.
Digital & Innovation Business Group
The Digital & Innovation Business Group brings together technology, the effective use of data, and our capability to deliver change and reform to drive the Met forward: this is central to progressing delivery of New Met for London 2. It includes the Met’s Transformation, Technology, Data and Analytics functions, as well as work underway to make the organisation more productive and efficient (referred to as Productivity & Efficiency or P&E). The Group was created in early 2026 and is led by Marie Heracleous, Chief Digital & Innovation Officer. It’s an exciting time to be part of D&I, as it builds new capabilities and ways of working to support the frontline and make a real difference to London.
D&I is committed to creating an inclusive working environment. We support hybrid working, and the hiring manager will be happy to discuss arrangements for this role.
Job Purpose
The Cyber Security function within Digital & Innovation (D&I) provides comprehensive security support focusing on (but not exclusive to) threat profiles, quantifying risk, as well as being the custodian for technical security standards and patterns within the Met. It provides information up to the Senior Information Risk Owner (SIRO) on the current state of the Met’s environment and illustrates the threats faced through numerous artefacts.
The Cyber Security Risk & Assurance role plays a vital part in ensuring the security controls and cyber baseline meet the standards, architecture and compliance regimes are in place thus ensuring the Met and associated ecosystem is protected.
Key Role Responsibilities:
Cyber Security Strategy
Support the implementation of the Cyber Security Strategy.
Work with internal/external stakeholders in providing security assurance against the Cyber Security Annual Plan.
Provide Cyber Security Risk & Assurance
Across the Procurement / Project / Delivery Lifecycle.
Assure.
IT Health Checks, IRAR’s and other risk related materials.
Supplier certifications.
Work directly with the Met Security Operations Centre ensuring that cyber controls (e.g. vulnerability management, threat hunting, intelligence) are conducted appropriately and in line with Met contractual requirements.
Develop and Implement Security Policies
Covering Live Met Estate.
Patching Regime.
Security Monitoring and Reporting.
Develop Security Protocols and Procedures.
Review
Met Risk Approach pertaining to Live Estate.
Continuous monitoring of supplier provided SOC to ensure they deliver services in line with their contract and develop monitoring to meet Met business requirements.
Operational
Support cyber related incidents as part of a Cyber Security Team 24/7 on-call rota.
Additional Information
Vetting Clearance
This post requires access to the most sensitive intelligence material on a daily basis. Applicants must hold or be prepared to undergo National Security Vetting (NSV) Developed Vetting (DV) level before taking up the post.
Working Pattern
Employment: Permanent, Full-Time (36-hours per week).
Hybrid Working available in line with the Metropolitan Police Service hybrid working policy.
You will be expected to work from a Met location for at least three days a week (60% of working time) to support our operational teams and collaborate effectively. For up to two days per week (no more than 40% of working time), you may be permitted to work from home, balancing flexibility with organisational need.
How to apply
To begin your career at the Met, please click the "apply button “. The application process requires a comprehensive CV, a Personal Statement, and an online application form. In your Personal Statement (1-Page of A4, 500 words maximum) you should explain your interest in the position and illustrate how your skills and experience (see stated criteria) make you a suitable candidate.Please note that you should not submit two copies of your CV, and ensure that your documents are saved in either PDF or Word format, clearly labelled as CV and Personal Statement.
Completed applications must be submitted by 23:55 on 24/08/2026.
www.metpolicecareers.co.uk
/*generated inline style */
Essential For The Role
Essential Criteria:
Applicants who already have awareness and appreciation of the Cyber Security and Risk Analyst roles, in the context of law enforcement are welcomed.
Desirable Criteria:
Additionally, any formal training in the below would be advantageous but not mandatory:
CISM, CISSP, Comp TIA.
InfoSec Training Paths & Competencies (ITPC).
SANS.
GCHQ backed Cyber / Information Security.
/*generated inline style */
Required Languages
English
/*generated inline style */
Reports To
Band S - Head of Cyber Security Delivery
/*generated inline style */
Additional Information
CVF Staff Band.pdf – 971KB Opens in a new window
/*generated inline style */
Disability Confident Statement
The Met is committed to being an equitable (fair and impartial) and inclusive employer for disabled people, striving to have a diverse and representative workforce at all levels. We encourage applications from people from the widest possible range of backgrounds, cultures and experiences. We particularly welcome applications from people with disabilities and long-term conditions, ethnic minority groups and women.
As a Disability Confident Leader, the Met has committed to making disability equality part of our everyday practice. We ensure that people with disabilities and those with long term conditions have the opportunities to fulfil their potential and realise their aspirations.
The Met is committed to making reasonable adjustments to the recruitment process to ensure disabled applicants can perform at their best. If you need any reasonable adjustments or changes to the application and recruitment process, we ask that you include this information within your application form. All matters will be treated in strict confidence.
Please note, if you are applying for a police officer role or to become a police community support officer (PCSO) or designated detention officer (DDO), there is a minimum requirement that you must pass a job-related fitness test (JRFT) at point of entry. This does not apply to police staff roles. Find out more about police fitness standards.
Read our full disability confidence statement.
/*generated inline style */
/*generated inline style */
