Chief Information & Security Officer (CISO)
Summary
Strategic cyber security lead for the UK's National Crime Agency: the CISO owns the agency's information/cyber security strategy, advises the board on cyber risk, and manages ~25 staff and a multi-year cyber investment programme. Requires CISSP/CISM/CCISO certification and Developed Vetting clearance.
- Job grade: SCS Pay Band 1
- Contract type: Permanent, Secondment
- Length of employment: The initial secondment offer will be up to 2 years, with possibility of extension.
- Type of role: Senior leadership
- Working pattern: Full-time, Job share, Part-time
- Number of jobs available: 1
Location
Please ensure you are only selecting locations you are willing to work in as you may be offered a post in any of your location preferences.
About the job
Job summary
The Chief Information Security Officer (CISO) is an exciting, new role for the Agency. The CISO will provide strategic leadership for information and cyber security across the Agency, ensuring that its information, technology, operational capabilities and people are protected from the continually evolving threats faced by a law enforcement organisation of national importance and scale.
As the Agency’s senior information and cyber security professional, the CISO will provide authoritative advice to the Director Generals, Executive Committee, Audit and Risk Committee, Information, Security and Standards Committee and senior operational leaders on cyber risk, information assurance, resilience and the security implications of strategic and operational decisions.
The postholder will lead the Agency’s cyber security strategy, risk appetite and security architecture, ensuring that security is embedded into the design and delivery of digital, data and technology capabilities rather than treated as a separate compliance function.
The role is particularly important in protecting capabilities that support serious and organised crime investigations, intelligence, covert operations, sensitive law enforcement information and critical national infrastructure.
The CISO will report directly to the Director General Capabilities and will be responsible for circa 25 staff and a multi-year Cyber investment programme.
Job description
Key Responsibilities:
Strategic leadership
- Develop and lead the Agency’s information and cyber security strategy and risk appetite, aligned with government security policy, the Agency’s strategic objectives and the threat environment.
- Provide clear, independent and authoritative advice to the Director Generals, Executive Committee and Board on the Agency’s cyber security posture and principal risks.
- Ensure cyber security considerations are incorporated into strategic planning, investment decisions, organisational change and operational capability development.
Operational cyber security and resilience
- Ensure the Agency has the capability to prevent, detect, respond to and recover from cyber-attacks and other information security incidents.
- Lead the Agency’s approach to cyber incident management, ensuring effective escalation, coordination and executive decision-making during significant incidents.
- Maintain effective relationships with relevant national cyber security and law enforcement partners and ensure the Agency can respond rapidly to emerging threats.
- Provide assurance that critical operational systems and services have appropriate security controls, resilience and recovery arrangements.
Security of operational capabilities
- Ensure security is proportionate to the sensitivity and operational importance of the Agency’s capabilities and information.
- Provide security leadership for the development and deployment of new operational technology, applications, data capabilities, cloud services and emerging technologies, including artificial intelligence.
People and culture
- Build a strong security culture in which every employee understands their responsibility for protecting Agency information and systems.
- Develop and retain high-performing cyber security and information assurance professionals.
Supply chain and third parties
- Ensure cyber security risks associated with suppliers, partners, contractors and technology providers are appropriately assessed and managed.
Government and external relationships
- Develop strong relationships with relevant government security functions, the National Cyber Security Centre, law enforcement partners and other national security organisations.
- Maintain an effective network of professional relationships across the wider cyber security community.
Leadership responsibilities
As an SCS1 leader, the CISO will:
- Provide visible, confident and inclusive leadership across the Agency.
- Set a clear strategic direction and create a high-performing security function.
- Build trusted relationships with operational, corporate and technology leaders.
- Provide constructive challenge to senior colleagues while maintaining a strong focus on organisational outcomes.
- Lead through ambiguity and respond effectively to a rapidly changing threat environment.
- Develop organisational capability and future leadership talent.
- Champion diversity, inclusion and professional development.
- Demonstrate the Civil Service leadership behaviours and values expected of an SCS leader.
The NCA CISO role is part of the Government Digital and Data profession, the Government Security profession and the newly formed (January 2026) Government Cyber Unit.
Person specification
Essential Criteria:
In your application you will need to demonstrate evidence against the below essential criteria:
We ask that you write a statement of suitability of no more than two pages A4 font Arial 11 using examples to explain how your skills and experience meet the essential criteria. Failure to address any or all of these may affect your application.
You will need to demonstrate the below essential criteria:
- Proven experience developing and implementing cyber security strategies and policies within a complex, digital, data and technology reliant, fast paced, highly regulated organisation and operating environment.
- In-depth understanding of cybersecurity threats, technologies and risk management practices with the ability to make sound judgements on the trade-offs between operational capability and security.
- Experience leading an operational cyber security function, including researching, and implementing, proven industry standard Cyber/Information Security related frameworks.
- Exceptional communication skills, with the ability to present complex security concepts to both technical and non-technical stakeholders at all levels.
- Demonstrable commitment to lead, develop and nurture a highly performing, diverse and talented workforce.
- One or more professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or Certified Chief Information Security Officer (CCISO).
If you do not hold any of the above qualifications, your application will not be progressed.
Please Note
The NCA is a 24/7 organisation, and working patterns must support business requirements. You are expected to participate in an on-call rota (approx. 4 - 5 weeks per year).
On-call runs 1800-0800 Mon-Fri and 24/7 weekends and bank holidays and training will be given prior to joining the rota.
This is a corporate requirement and no additional remuneration is paid.
Examples for on-call include staffing incidents; building issues (flooding etc); operational incidents; cross-government liaison.
Individuals will be required to undertake and pass a substance misuse test as part of pre-employment checks.
If successful, the offer made will be conditional on you being able to acquire and retain security clearance Developed Vetting (DV) prior to commencing in the role, and STRAP post appointment.
We want to recruit and retain the very best and broadest diversity of officers so the NCA welcomes applications from individuals from all minority backgrounds and protected characteristics.
Please be aware that you can be posted to any location that you put in your preferences. If you would only like to be posted to one location, please confirm one location only.
If you are posted to a location that you have requested and you do not accept that location, you may not be offered another role.
Benefits
Civil Service Pension
A competitive contributory pension scheme that you can enter as soon as you join where we will make a significant contribution to the cost of your pension; your contributions come out of your salary before any tax is taken; and where your pension will continue to provide valuable benefits for you and your family if you are too ill to continue to work or die before you retire.
If you are an active police pension member immediately prior to joining the NCA, you can continue your membership throughout your employment with us.
Annual Leave
25 days annual leave on entry (plus one privilege day for the King’s Birthday), plus 8 Bank Holidays, increasing to 30 days after reaching 5 years continuous service (plus one privilege day for the King’s Birthday), plus 8 Bank Holidays.
If qualifying criteria is met new joiners to the NCA from UK Police Forces or UKIC will have service with those employers taken into account for continuous service purposes for Annual Leave entitlement only, this will be up to a maximum of 30 days leave (plus 1 privilege day for the King’s Birthday).
Parental Leave
Family friendly policies including paid maternity, adoption, paternity and shared parental leave of up to 26 weeks.
Access to the government Tax-Free Childcare (TFC) scheme. Existing employees may be able to continue to claim childcare vouchers.
Flexible Working
Flexible working arrangements allowing you to split your work between the office and home, subject to the nature of the role.
Alternative working patterns such as part-time and compressed hours options subject to business needs.
Support for officers who are Reservists and Special Constables.
Learning and Development
Access to a range of learning and development activities, and opportunities to support career progression.
Paid time off to facilitate continuous professional development, and access to Civil Service Learning up to 5 days per year.
Wellbeing and Inclusion
Occupational sick pay and access to occupational health services.
A network of qualified Mental Health First Aiders and Workplace Support Officers, who can provide advice, signposting and support to all our officers.
On site facilities including fitness centres and canteens (where available). Access to a variety of active staff network groups.
Employee Savings
Interest-free loans allowing you to spread the cost of an annual travel season ticket.
Access to a wide range of discounts, offers and gift cards with a number of high street and online retailers through the Blue light Scheme and EdenRed.
Cycle2work salary sacrifice scheme to hire a bicycle up to the value of £4,000 to assist in improving health and fitness and save you money.
Access to a home and technology purchase scheme, allowing you to purchase items and spread the cost over 12 months through salary sacrifice.
Key worker status, enabling access to accommodation at a discounted rate, subject to eligibility.
Access to a range of sports, leisure and health benefits at reduced prices through membership with Civil Service Sports Council (CSSC).
Things you need to know
Artificial intelligence
Selection process details
To apply for this post, you will need to complete the online application process, outlined below. This should be completed no later than Sunday 29th November 2026.
- Enter your CV details setting out your career history, including key responsibilities and achievements. It is essential that your CV reflects the role you are applying for. Please ensure you have provided reasons for any employment gaps within the last two years.
- A statement of suitability of no more than two pages A4 font Arial 11 using examples to explain how your skills and experience meet the essential criteria of the person specification on page 12 of the candidate information pack.
In order to monitor the effectiveness of the National Crime Agency’s Diversity & Inclusion strategy, the NCA require certain personal details about you on submission of your application. Please note that this will be treated in confidence and will not impact your application.
As part of your application, you will be asked to complete a diversity monitoring form. If you do not wish to provide a declaration on any of the particular characteristics, you will have the option to select ‘prefer not to say’. All monitoring data will be treated in the strictest confidence and will not be provided to the selection panel. The information you provide when submitting
your application will help us monitor our progress towards the Civil Service becoming the most inclusive employer.
Your application will be acknowledged within 48 hours of receipt.
Should you encounter any issues with your application please get in touch with our recruitment partner at the following email address: scscandidate.grs@cabinetoffice.gov.uk
The NCA is also currently advertising for a Director International. Candidates may apply for both vacancies but must submit two separate applications.
Shortlist
A shortlisting meeting will be held in the week commencing 7th December 2026.
Assessment
A virtual Staff Engagement Exercise which will be delivered virtually on MS Teams in the week commencing 4th or 11th January 2027.
This stage will not result in a pass or fail decision. They are designed to support the panel’s decision-making and highlight areas for the panel to explore further at interview.
Final Panel Interview
The interview will be held in London week commencing 18th or 25th January 2027. The panel will assess your previous experience and professional competence against the essential criteria of the person specification on page 10. You will also be asked to deliver a presentation/in-tray exercise.
Full details of the requirements will be given to shortlisted candidates ahead of their interview.
Shortlisted candidates may also be offered the opportunity to find out more about the role in conversation with the vacancy holder or a member of the senior executive team.
Offer
Regardless of the outcome, we will notify all candidates as soon as possible.
If your application is successful and we are unable to offer you a post immediately, you will be invited to join our reserve list so that we can continue to communicate with you regarding your employment with the Agency, and the incredible work that we do. If over the next 12 months we are able to offer you a position, we will contact you as soon as possible.
If you are not found appointable at the advertised grade you may be offered the lower grade role if you are considered to meet the skills, experience and behaviours for the lower level. The benchmark for appointing to the lower grade is set at the start of each campaign. All offers will be made in merit.
Appointments will be made in adherence to the Civil Service Recruitment Principles and in strict merit order with the highest scoring candidates being appointed first.
The NCA is a law enforcement agency and as such we are part of the Criminal Justice System. Therefore, if you are going into an operational role we need to be aware if any of our officers have, either before they join us or afterwards, any of the following:
- Any criminal conviction (including by Court Martial), or caution or fixed penalty notice for disorder or theft;
- Any adverse judicial findings;
- Any charges or summonses where the proceedings are not complete;
- Any misconduct or gross misconduct findings or where proceedings are not complete.
You will be asked to complete a declaration form covering the above if offered a role with the NCA.
Each case will be considered on its merits and a positive declaration does not automatically mean that your application will not be progressed. However, should you fail to disclose a relevant matter then your application or employment will be adversely affected. If in doubt, please declare it at this stage.’
Indicative Timeline
The anticipated timetable is as follows:
Advert Closing Date - Sunday 29th November 2026
Longlist interviews – if conducted w/c 14th December 2026
Expected shortlist announcement - w/c 18th December 2026
Virtual Assessments - w/c 4th or 11th January 2027
Interviews - w/c 18th or 25th January 2027
Further Information
Pre-employment checks
Pre-employment checks take on average 16 weeks from the point of offer to arranging a start date. This includes vetting, occupational health assessments, employment history checks and substance misuse tests. This is an approximate time frame and is to be taken as a guideline only as this can very between candidates. This is dependent on when all requested documentation is provided.
Candidates are asked to note the above timetable, which may be likely to some change, and are asked to exercise flexibility through the recruitment and selection process.
Reasonable Adjustment
If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should:
- Contact Government Recruitment Service at: scscandidate.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
- Complete the ‘assistance required’ section in the ‘personal information’ page of your application form to provide information we should be aware of that will enable us to support you further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.
If you are experiencing accessibility problems with any attachments on this advert, please contact: scscandidate.grs@cabinetoffice.gov.uk
Feedback will only be provided if you attend an interview or assessment.
As part of accepting this role you will be agreeing to the expected assignment duration set out above. This will not result in a contractual change to your terms and conditions. Please note this is an expectation only, it is not something which is written into your terms and conditions or indeed which the employing organisation or you are bound by. It will depend on your personal circumstances at a particular time and business needs, for example, would not preclude any absence like family friendly leave. It is nonetheless an important expectation, which is why we ask you to confirm you agree to the assignment duration set out above.
Security
See our vetting charter (opens in a new window).
Nationality requirements
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Diversity and Inclusion
Apply and further information
Contact point for applicants
Job contact :
- Name : SCS Recruitment Team
- Email : scscandidate.grs@cabinetoffice.gov.uk
Recruitment team
- Email : scscandidate.grs@cabinetoffice.gov.uk
Further information
Attachments
| NCA CISO SCS1 CIP Final (1) Opens in new window (pdf, 1461kB) |
Share this page
- Gmail