Lead Cyber Security Monitoring

This role sits within the Security Operations Centre and responds to events found as part of the protective monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures.It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible levels of service quality and availability aremaintained, whilstcontainingany security breach to allow for forensic analysis toestablishcause.Itestablishesaction plans in collaboration with other managers in the team and wider DVSA. It effectively manages,investigatesand reports on potential/actual failures tocomply withsecurity requirements, andidentifiesprocess improvements Joining our department comes with many benefits, including: Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensionshere 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays aprivilege day for the King’s birthday Flexible working options where we encourage a great work-life balance. Read more in the Benefits section below! Find out more about whatit'slikeworking atDriver and Vehicle Standards Agency - Department for Transport Careers Your responsibilities will include, butaren’tlimited to: Leading the rapid detection, investigation, and response to cyber security incidents, ensuring threats are contained, impact is minimised, and incidents are handled in line with DVSA policies, legal requirements, andbest‑practicesecurity standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence toidentifyemerging risks, suspicious activity, and weaknesses in DVSA’s security posture. Manage post-incident review, including root cause analysis, to feedback information and so improve monitoring and evidencing need for policychangeas necessary. Managing and improving SOC processes and protective monitoring capabilities, ensuring DVSA and its suppliers meet contractual and policy obligations for incident reporting and security operations. Planning, leading, and evaluating incident response exercises, includingred‑teamactivity, to strengthen organisational readiness andvalidateresponse procedures. Providingexpert advice to senior leaders and technical teams, helping them understand risks, make informed decisions, and embed strong security practices. Building strong relationships across DVSA and with external partners, including government departments, regulators, andthird‑partysuppliers. Producing clear,high‑qualityreporting and communication, including incident summaries, performance statistics, lessons learned, and recommendations for continuous improvement. Demonstrating leadership by guiding, mentoring, and supporting SOC analysts and colleagues, acting as a role model for professional standards, technical excellence, and Civil Service values. Great line management is important to us as anorganisation, and we will equip and support line managers to develop the skills they need. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public. For further information on the role, please read theattachedrole profile.Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process. Proud member of the Disability Confident employer scheme Lead Cyber Security Monitoring Company: Government Recruitment Service Salary: £44,241 - £44,241 Hours: Full-time Location: Uxbridge Job type: Permanent Posting date: 10 Aug 2026 Closing date: 31 Aug 2026 Summary This role sits within the Security Operations Centre and responds to events found as part of the protective monitoring processes led directly by DVSA or its service provider. It also responds to incidents of a technical nature in line with DVSA Incident Management procedures.It restores normal service operation as quickly as possible and minimises any adverse effect on business operations. This ensures that the best possible levels of service quality and availability aremaintained, whilstcontainingany security breach to allow for forensic analysis toestablishcause.Itestablishesaction plans in collaboration with other managers in the team and wider DVSA. It effectively manages,investigatesand reports on potential/actual failures tocomply withsecurity requirements, andidentifiesprocess improvements Leading the rapid detection, investigation, and response to cyber security incidents, ensuring threats are contained, impact is minimised, and incidents are handled in line with DVSA policies, legal requirements, andbest‑practicesecurity standards, including performing or arranging digital forensics to support evidence gathering and preservation. Driving proactive cyber defence through threat hunting and vulnerability management, using threat intelligence toidentifyemerging risks, suspicious activity, and weaknesses in DVSA’s security posture. Manage post-incident review, including root cause analysis, to feedback information and so improve monitoring and evidencing need for policychangeas necessary. Managing and improving SOC processes and protective monitoring capabilities, ensuring DVSA and its suppliers meet contractual and policy obligations for incident reporting and security operations. Planning, leading, and evaluating incident response exercises, includingred‑teamactivity, to strengthen organisational readiness andvalidateresponse procedures. Providingexpert advice to senior leaders and technical teams, helping them understand risks, make informed decisions, and embed strong security practices. Building strong relationships across DVSA and with external partners, including government departments, regulators, andthird‑partysuppliers. Producing clear,high‑qualityreporting and communication, including incident summaries, performance statistics, lessons learned, and recommendations for continuous improvement. Demonstrating leadership by guiding, mentoring, and supporting SOC analysts and colleagues, acting as a role model for professional standards, technical excellence, and Civil Service values. Great line management is important to us as anorganisation, and we will equip and support line managers to develop the skills they need. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public. For further information on the role, please read theattachedrole profile.Please note that the role profile is for information purposes only - whilst all elements are relevant to the role, they may not all be assessed during the recruitment process. This job advert will detail exactly what will be assessed during the recruitment process. Proud member of the Disability Confident employer scheme About Disability Confident Disability Confident is a government scheme. It encourages employers to recruit and retain disabled people and those with long term health conditions. Related jobs Problem Manager £35,663 to £35,663 per year Government Recruitment Service Uxbridge Permanent Full time Director of Cyber Security (Home-based UK) Health Partners Group Ltd , Remote Permanent Full time Senior Dynamics Developer (Power Platform) £44,241 to £44,241 per year Government Recruitment Service Uxbridge Permanent Full time Browse more jobs #J-18808-Ljbffr Allscreens Nationwide Ltd