Apply before
05/08/2026, 23:55
Reference number
929
Salary
£45,326
London weighting allowance (Per Annum)
£4,218
Role grade
G4
Contract type
Permanent
Command
Threat Leadership
Business Area
National Cyber Crime Unit (NCCU)
Type of role
Analytical, Governance, Operational Delivery, Project Delivery, Risk Management
Working pattern
Full time, Part time, Flexible Working, Job share
Number of roles available
3
Senior Officer - National Cyber Crime Unit (NCCU) Threat Leadership
Location(s)
Birmingham, Bristol, London, Warrington
About the Role
Information about the Command
Threat Leadership is responsible for the national response to the Serious Organised Crime (SOC) threats. Our role is to work with partners both inside the NCA and externally to set the strategic direction, facilitate effective delivery of the response, and ensure we understand the impact of our activity. Adopting a threat-led and intelligence driven approach, we identify emerging challenges and changes to the threat landscape. A key objective is to tackle SOC threats by maximising the benefit of new capability across the system. This approach means we can achieve more with the resources we have and be more effective developing business cases to enhance our response.
Driving the multi-agency UK 4P (PURSUE, PREVENT, PROTECT, PREPARE) response by agreeing threat priorities, influencing tasking of operational activity across law enforcement, facilitating partner action and informing policy, regulatory and legislative changes to better protect the public. Threat Leadership leads the national response for Organised Immigration Crime (OIC), Modern Slavery and Human Trafficking (MSHT), Drugs, Firearms, Child Sexual Abuse (CSA) and Borders. Threat Leadership is also home to the National Cyber Crime Unit, which combines Cyber threat leadership with an operational response.
Information about the Business Area
National Cyber Crime Unit (NCCU) is the UK lead for tackling the threat from cyber crime - a single Unit with the responsibility and capability to deliver operations, lead the overall UK response, coordinate activity across a range of partners, and provide specialist cyber support and expertise across law enforcement.
Role Summary
This is an exciting opportunity to join the growing National Cyber Crime Unit (NCCU) Threat Leadership function, playing a key role in shaping and driving the response to the cybercrime threat across the NCA and wider law enforcement landscape.
The role requires a strategic and forward-looking approach, with the ability to assess complex threat environments and translate insight into effective operational and organisational responses. Strong interpersonal skills are essential, alongside the ability to influence, collaborate and deliver at pace across a wide range of stakeholders.
The successful candidate will be expected to deliver high-quality outcomes with accuracy, creativity and innovation, contributing to a dynamic and evolving area of national security priority.
Role Description
As a Senior Officer, you will develop and maintain a strong understanding of the cyber threat landscape, using research, analysis and stakeholder engagement to build subject matter expertise and inform decision-making. You will support the development and delivery of key strategic products, including the National Control Strategy, Cyber Strategic Assessment and Plan (SAP), and Tactical Action Plans, ensuring that strategic priorities are translated into meaningful action. The role requires the ability to analyse complex information and present it clearly through high-quality briefings, reports and presentations for senior leaders and partner organisations.
You will support and coordinate governance arrangements across the cybercrime network, including planning and facilitating key boards and delivery groups, tracking progress and ensuring actions are effectively managed. Working closely with internal teams and external partners, you will contribute to the delivery of projects, campaigns and initiatives that support the UK’s response to cybercrime, ensuring activity remains focused on agreed outcomes and strategic objectives.
A key element of the role involves assessing performance, impact and effectiveness across cybercrime activity. You will analyse data, monitor operational outcomes and produce performance reports and impact assessments that inform decision-making and drive continuous improvement. You will also contribute to the development of performance frameworks and measures that help demonstrate the value and effectiveness of cyber interventions.
Building and maintaining strong relationships with a broad range of stakeholders is central to success in this role. You will work collaboratively with law enforcement partners, government departments and other organisations to support coordinated delivery, improve performance and align activity across Team Cyber UK. Through effective communication and influencing skills, you will engage stakeholders at all levels and contribute to achieving shared objectives.
The successful candidate will have a good understanding of the serious and organised crime (SOC) landscape, particularly in relation to cyber and online crime, and an appreciation of law enforcement processes, partnership working and disruption opportunities. You will be able to align your work with Agency and cross-government priorities, manage competing demands, and deliver high-quality outcomes in a fast-paced environment. Strong judgement, resilience and the ability to make effective decisions in complex situations are essential.
You will demonstrate a commitment to professional excellence, continuous improvement and inclusive leadership, supporting the development and wellbeing of colleagues while helping to strengthen the NCCU Threat Leadership capability. This is an excellent opportunity for a proactive and motivated individual to influence strategic outcomes and make a meaningful contribution to the UK’s response to cybercrime.
The Threat Leadership function within the NCCU brings together the Strategy, Performance & Impact, and 4P Hub teams to provide cohesive leadership of the UK’s response to cybercrime.
Strategy Team - Responsible for shaping and driving the strategic direction of Team Cyber UK. This includes developing and maintaining key strategic frameworks such as the National Control Strategy and the SAP, engaging across government and with international partners, and delivering high-quality briefings. The team also supports delivery of the SAP by producing innovative and accessible materials tailored to a range of audiences.
Performance & Impact Team - Provides oversight of system performance and effectiveness. It leads on performance tracking, disruption monitoring, ambition setting, and system-wide impact assessment. Through its analysis and reporting, the team enables NCCU to align resources effectively, evaluate outcomes, and respond proactively to emerging cyber threats.
4P Hub Team - Leads the operational response across Pursue, Prevent, Protect and Prepare. They provide system leadership by translating strategic priorities into coordinated Tactical Action Plans, overseeing governance and tasking across partners, and delivering projects, operations and campaigns at scale to reduce the impact of cybercrime.
We are recruiting for roles across these teams. Successful candidates will contribute to a dynamic and fast-paced environment, requiring strong collaboration, strategic thinking, and the ability to drive delivery across organisational and partner boundaries.
Duties and Responsibilities
Strategic Leadership and Cyber Threat Understanding - Develop and maintain a strong understanding of the cyber threat landscape, building subject matter expertise through research, analysis and engagement with internal and external partners. Ensure activity is aligned with NCCU and Agency strategic priorities, contributing to a coherent and effective national cyber response. Promote a whole-system 4P approach, supporting the continuous improvement of the UK’s response to cybercrime.
Strategic Products, Planning and Briefing - Lead or support the development of key strategic products, including the National Control Strategy, Cyber SAP, and Tactical Action Plans. Produce high-quality briefings, presentations and materials for senior leaders, governance boards and external stakeholders, ensuring clarity, accuracy and impact. Translate complex information into clear, actionable insights for a range of audiences.
Governance, Coordination and Delivery Boards - Plan, coordinate and, where appropriate, provide secretariat support to governance forums (e.g. Cyber 3P Board, Pursue Board and other delivery groups). Drive forward actions and decisions arising from these forums, ensuring effective follow-up and accountability across stakeholders. Support effective governance by ensuring work is tracked, reported and aligned with strategic objectives.
Operational Delivery and Project Management - Lead or contribute to the delivery of projects, campaigns and initiatives aligned to Tactical Action Plans. Coordinate activity across the system, supporting delivery partners and maintaining awareness of related workstreams. Ensure delivery is timely, outcome-focused and aligned with strategic priorities.
Performance, Insight and Impact - Analyse performance data and assess the impact of cyber activity across the network, including disruption monitoring and evaluation of outcomes. Produce performance reports and impact assessments to inform decision-making, drive improvement and demonstrate value. Support the development of performance frameworks and measures of effectiveness.
Stakeholder Engagement and System Leadership - Build and maintain strong relationships with internal teams, law enforcement partners, government departments and wider stakeholders. Support system leadership by fostering collaboration, sharing information effectively and aligning activity across Team Cyber UK. Engage stakeholders to drive delivery, improve performance and support the achievement of shared objectives.
People Leadership and Development - Provide inclusive leadership and actively support the development, performance and wellbeing of colleagues. Coach and support team members, building capability, resilience and confidence in delivering their roles. Promote a positive, inclusive culture aligned with Agency values.
Professional Standards and Continuous Improvement - Maintain high standards of professionalism, accuracy and accountability in all aspects of work. Identify opportunities for innovation and continuous improvement, contributing to the development of Threat Leadership capability. Ensure all activity is delivered in line with relevant policies, governance and organisational expectations.
Person Specification
Knowledge of the Serious and Organised Crime (SOC) System - Demonstrable knowledge of the SOC landscape, particularly in relation to cyber and/or online crime. Understanding of law enforcement processes, partnership working and disruption opportunities across the SOC system. Ability to apply this knowledge to support strategic and operational outcomes.
Strategic Awareness and Alignment – Strong understanding of the strategic drivers underpinning the response to SOC. Ability to align activity with departmental, Agency and cross-government priorities. Experience of translating strategic objectives into practical delivery or actionable plans.
Communication and Influencing - Excellent written and verbal communication skills, with the ability to produce high-quality briefings, reports and presentations for a range of audiences, including senior stakeholders. Proficient in the use of presentation tools (e.g. PowerPoint) and other creative platforms to communicate complex information clearly and effectively. Ability to influence and engage stakeholders to support delivery and decision-making.
Collaboration and Stakeholder Engagement - Proven ability to work collaboratively with internal and external stakeholders to achieve shared objectives. Experience of building and maintaining effective professional relationships across organisational boundaries. Ability to operate confidently within multi-agency environments, supporting coordinated delivery.
Delivering at Pace - Demonstrated ability to manage competing priorities and deliver high-quality outputs to tight deadlines. Strong organisational skills, with the ability to prioritise workload effectively in a fast-paced environment. Resilient and adaptable, maintaining performance under pressure.
Making Effective Decisions - Experience of making well-informed, timely decisions in complex or ambiguous situations. Demonstrates sound judgement, accountability, and the ability to assess risk and consider wider impacts. Capable of making proportionate decisions that balance operational, strategic and stakeholder considerations.
Salary
Allowances are reviewed annually and may be increased, decreased or removed.
All salary offers will be made in line with Remuneration Policy.
Roles based in London will receive an additional London Weighting (Per Annum) of £4,218
Benefits
All NCA employees are members of the UK Civil Service and eligible for the Civil Service pension scheme, alongside your salary the NCA contributes £13131. Further information on the benefits of the scheme is available on the Civil Service Pension Website.
New entrants to the NCA receive 26 days annual leave, rising to 31 on completion of 5 years continuous service, plus 8 bank holidays.
If qualifying criteria is met new joiners from UK Police Forces or the UK Intelligence Community (UKIC) will have service with those employers taken into account for continuous service purposes for annual leave entitlement only, this will be up to a maximum of 31 days leave (including 1 privilege day).
Other benefits include:
Flexible working, including flexi-time, compressed hours and job sharing (in line with business requirements)
Family friendly policies, notably above the statutory minimum
Learning and Development opportunities
Interest free loans and advances, including season tickets, childcare and rental deposits
Housing schemes - Key Worker status
Discounts and Savings with a wide variety of services including Cycle to Work, Smart Tech schemes, dental insurance, gym discounts and savings on everyday spending, available through the Reward Gateway | Edenred and Blue Light Card schemes.
Staff support groups/networks
Sports and social activities, including membership to the Civil Service Sports Council (CSSC)
Further information is available on the NCA Website.
Selection Process Details
This vacancy is using the Success Profiles framework and will assess using the following criteria: Behaviours, Experience, Technical Skills
Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
How we will assess you
Your application will be assessed against the following:
Technical - this will be assessed by 250 word examples on:
Strong understanding of the Serious and Organised Crime (SOC) system, with particular knowledge of cyber and/or online crime, including the ability to navigate partnership environments, apply law enforcement processes, and identify and exploit disruption opportunities to support operational and strategic outcomes.
Excellent drafting and presentation skills, with the ability to communicate complex information clearly and effectively through high-quality written products and engaging presentations, using PowerPoint and other creative tools.
Demonstrable ability to build, influence and maintain effective stakeholder relationships, enabling the successful delivery of complex work across organisational and partner boundaries.
Experience - This will be assessed:
CV
Please include your full career history, training, qualifications, key responsibilities, and achievements. Explain any employment gaps in the last two years. Ensure all accreditation dates are accurate.
Details of what is expected within your CV are as follows: Please submit a current CV that clearly demonstrates how you meet the Person Specification. It must include your full employment history with job titles and dates, details of relevant qualifications, certificates and training, and clear explanations for any gaps in employment or education over the last five years.
Your CV must not exceed two pages in length with a minimum font size of 10pt. Any excess information will not be scored as part of your application.
Experience Criteria - will be assessed by 250 word examples on:
TEAM PREFERENCE
A panel will assess how well your application demonstrates the requirements outlined above.
Longlist
In the event of a high number of applications, we may operate a longlist. Applicants will need to meet the minimum pass mark for the lead criteria.
- Strong understanding of the Serious and Organised Crime (SOC) system, with particular knowledge of cyber and/or online crime, including the ability to navigate partnership environments, apply law enforcement processes, and identify and exploit disruption opportunities to support operational and strategic outcomes. .
Candidates who do not meet the minimum pass mark for the lead criteria will not progress to having their other criteria assessed. Applications must meet the minimum criteria to be progressed to the assessment stage.
You will receive an acknowledgement once your application is submitted.
We aim to have sift completed and scores released within 10 working days of the closing date of the advert. For high volume campaigns this timeframe may be extended.
Scores will be provided but further feedback will not be available at this stage.
For guidance on the application process, visit:
NCA Applying and Onboarding
Assessment 1
The format of this assessment will be Interview which will be tested on the criteria listed in the Success Profiles at Assessment section.
Success Profiles at Assessment
Behaviours
Seeing the Big Picture
Delivering at Pace
Making Effective Decisions
Technical
Strong understanding of the Serious and Organised Crime (SOC) system, with particular knowledge of cyber and/or online crime, including the ability to navigate partnership environments, apply law enforcement processes, and identify and exploit disruption opportunities to support operational and strategic outcomes.
Excellent drafting and presentation skills, with the ability to communicate complex information clearly and effectively through high-quality written products and engaging presentations, using PowerPoint and other creative tools.
Demonstrable ability to build, influence and maintain effective stakeholder relationships, enabling the successful delivery of complex work across organisational and partner boundaries.
Assessment Outcome
Outcomes will be communicated via the NCA recruitment portal.
If successful but no role is immediately available, you may be placed on a reserve list for 12 months.
Reserve lists can be used to fill similar role types across the Agency where the assessment criteria is considered a match by the recruitment team and the business area.
In the event of a tie at the assessment stage, available roles will be offered in merit order using the following order:
Lead criteria (behaviours/technical/experience)
If still tied, desirable criteria will be assessed (if advertised)
If still tied, application sift scores will be used
Feedback is provided only to those who attend an assessment.
You will be subject to vetting and pre-employment checks before appointment.
Once the vacancy closes, the advert will no longer be accessible. Please save a copy for your records.
We encourage all candidates to visit the NCA Careers Page for more information.
Eligibility, Pre-Employment Check and Vetting
Please see the NCA T&Cs and Privacy Policy (pdf) for details on how your data is handled.
If you are an internal candidate who has passed interview but is undergoing an internal investigation or have a written warning in place preventing a post move you may not be able to be posted until this investigation is concluded or restriction lifted.
Nationality Requirements
This role is broadly open to the following groups:
- UK nationals or dual nationals, where one component is British
Further information on nationality requirements
You will be required to participate in digital right to work and address checks as part of the recruitment process.
Security and Vetting
People working with government assets must complete baseline personnel security standard checks.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is SC Enhanced. All security clearances will be managed by the NCA.
For more information on security vetting please visit: UK Security Vetting guidance for applicants and Demystifying Vetting and see our vetting charter at: The Vetting Charter.
Vetting requirements - SC Enhanced
Prior to commencing the role, you will need to successfully complete SC Enhanced clearance and then achieve both DV Enhanced and DV STRAP clearance within the first 12 months in post.
The requirement for SC clearance is to have been present in the UK for at least 3 of the last 5 years.
The requirement for DV Enhanced clearance is to have been present in the UK for at least 7 of the last 10 years.
To obtain DV STRAP you must be willing to undergo STRAP induction and must hold full UK nationality or dual nationality, where one component is British. Applications will be considered on a case by case basis.
Failure to meet the residency requirements will result in your security clearance application being rejected.
If the increased clearance cannot be obtained you will be moved to a role appropriate to your clearance level achieved on entry.
For further information on National Security Vetting checks please visit the following page Demystifying Vetting
Individuals will be required to undertake and pass a substance misuse test as part of pre-employment checks.
Occupational Health
Successful candidates will be expected to undertake an occupational health assessment. Depending on the role an in-person medical may be required in either London or Warrington. Unfortunately, travel costs will not be reimbursed.
Things you need to know
Multi Location
Where multiple locations are advertised, appointments will be made in merit order for each location.
Please indicate up to three location preferences clearly. Only your first three preferences will be considered. You may be allocated to any of the locations you select. If you decline an offer for a location you have selected as a preference, a further offer may not be made.
If you choose to reject an offer and no alternative preferred location can be offered, you will not be able to return to the process or be placed on a reserve list.
Only the advertised locations are available; any additional notes added to the application will not be taken into account.
Near Miss
If you meet the criteria for a lower grade, you may be offered that role if not appointable at the advertised grade.
Conversely, if found appointable at a higher grade but no posts are available, you may be offered a lower-grade role.
All offers are made based on merit.
Hybrid Working
The NCA supports hybrid working. The extent of remote working will depend on the role and can be discussed at the offer stage.
Reasonable Adjustments
We’re proud to be a Disability Confident Leader and an inclusive, equal opportunities employer.
We’re committed to creating a workplace where everyone can be their authentic self. If you’re neurodiverse, have a disability, or live with a long-term health condition, we encourage you to let us know about any reasonable adjustments you may need during the recruitment process.
If you experience accessibility issues with the advert or require reasonable adjustments, please contact our Recruitment Team at
[email protected] before the advert closing date.
Please ensure you complete the ‘Equal opportunities’ and 'Reasonable Adjustments' sections in the application form to inform us on what support you may need in the recruitment process.
For more on our Disability Confident commitment, visit Disability Confident Scheme | Civil Service Careers.
Visit NCA Benefits and Support for more details.
Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy
In order to monitor the effectiveness of the National Crime Agency's Diversity & Inclusion strategy, we require certain personal details about you on submission of your application for statistical and monitoring purposes only. Please note that this will be treated in confidence and will not impact your application.
This vacancy is part of the Great Place to Work for Veterans initiative.
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.
We recruit on merit through fair and open competition, in line with the Civil Service Commission's Recruitment Principles.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
If you believe your application has not been treated fairly, email:
[email protected] (quoting the vacancy reference).
If unresolved, you may escalate your complaint to the Civil Service Commission.
Working for the NCA
The National Crime Agency is a 24/7 organisation, and working patterns must support business requirements. Some roles may require you to respond at short notice or outside of core hours.
If preferable, alternative contract types may be available. Please review the green bar of this advert to view all available contract types for this role. Where Loan or Secondment options are available, these would be for existing Civil Servants (Loan) and applicants from accredited Non-Departmental Public Bodies (NDPBs) or any other employer (Secondment). Prior agreement to be released on a loan basis must be obtained before commencing the application process. In the case of Civil Servants, the terms of the loan will be agreed between the home and host department and the Civil Servant. This includes grade on return.
If you have any specific queries about the role that are not covered by the advert, please contact:
Name : Central Recruitment Team
Email : [email protected]