10 Apr 2018

Permanent Cyber Risk Accreditor

MI5 – Posted by AdminCheltenham, England, United Kingdom

Job Description

IT, Science & Technical
Central London
Full Time
£56,643 – £60,843

Who we are

MI5 is the UK’s domestic intelligence agency. We safeguard the UK against threats to national security including terrorism, espionage and sabotage. At MI5, we investigate suspect individuals and organisations to obtain, collate, analyse and assess secret intelligence relating to these threats. We also act to counter the sources of threats, as well as working to reduce any government or infrastructure vulnerabilities.

Why work here:

A career at MI5 is like no other. Not only is it rewarding and unique, but the variety is unlike anywhere else. This, together with our supportive and flexible working environment, means most people who join MI5 stay for a substantial part of their careers.

Our staff enjoy a healthy work-life balance and a range of benefits, along with the satisfaction of contributing to keeping the country safe.

We value difference and it is essential to our success to build an inclusive workplace offering varied and rewarding careers for all.

MI5 is committed to reflecting both equal opportunities and the society we protect.

The Role

As a Cyber Risk Accreditor in our Information Technology group, you will make a significant contribution towards safeguarding the UK’s national security. Being part of a fast-moving information function, you will be a key participant in the design and delivery of a variety of strategic programmes and business critical initiatives within a dynamic, challenging and rewarding environment.

Key Responsibilities:

  • To act as an impartial assessor of the risks than an information system is subject to;
  • Advise the business on the acceptability of information security risks in the light of the business need;
  • Undertake initial and ongoing accreditation of MI5 and third party systems and environments;
  • Monitor changes to live systems, challenging where appropriate and assessing implications for assurance status;
  • Provide specialist advice to IT design and best practice to achieve and maintain the required level of assurance;
  • Providing constructive and timely security advice to system developers.

Who are we looking for:

Essential Skills:

Broad understanding of:

  • Common operating systems (eg Windows, AIX, Linux)
  • Network technologies including protocols and their implementations
  • Security technologies including Firewall, Antivirus, cryptography
  • Messaging technologies (eg Exchange, X.400)
  • Database Management Systems
  • WiFi and RF
  • Secure configuration and lockdown
  • Security and penetration testing
  • Knowledge of international security standards (ISO28001)
  • Knowledge of HMG Security Policy Framework, HMG policy and NCSC guidance
  • Ability to justify accreditation decisions to stakeholders in terms of the business objectives, threats, risks, vulnerabilities, controls and business impacts
  • Able to build constructive relationships with the business, and external partners, to build accreditation into business and project plans
  • Ability to influence information asset owners and their senior stake holders (including external ones) to support accreditation processes
  • Ability to understand the business context of IT systems

Desirable Skills:

Ability to reconcile internal policies with those wider ODG, commercial and LEA organisations;

Validated skills under the CESG certified Professional Scheme (CCP) for Lead/Senior Accreditor.

Eligibility Criteria:

To be eligible to apply, you must meet our residency criteria. You must be a born or naturalised British citizen and one of your parents must be a British citizen or have substantial ties to the UK.

Candidates must normally have been resident for nine out of the last ten years prior to making an application. This is particularly important if you were born outside of the UK. You will nonetheless be considered if you have, for example, served overseas with HM Forces or in some other official capacity as a representative of Her Majesty’s Government, studied abroad, or lives overseas with your parents.

Due to vetting requirements you will need to be 18 years old, or above, to apply.

Recruitment Process:

Firstly, you will be asked to complete our pre-screening questions to find out if you meet our initial criteria. If you do meet these criteria we will then direct you to begin an application.

You will need to create a log in providing your full name, email address and a memorable password. Once you have successfully created a personal account, you will be required to complete an initial application form, providing contact details and equal opportunities information.

You will then be invited to upload your CV and complete an online application form. Our recruitment team will conduct a sift of your application.

Successful applicants will be invited to a telephone interview.

Successful applicants at telephone interview will be invited to attend an interview which will include some competency based questions and will explore your motivation to work for MI5.

You must pass each stage of the process to progress to the next.

In line with our strict ‘no drugs’ policy, as part of the recruitment process, you will be expected to undertake a drugs test and complete an accompanying questionnaire.

On successful completion of all recruitment stages you will enter into the vetting process, which will involve a security interview.

Your application may take around six to nine months to process.

Guaranteed Interview Scheme

As part of our commitment to being a ‘Disability Confident Leader’ we offer an interview to all candidates with a disability who meet our minimum criteria for the job vacancy for which they are applying. This is known as the Guaranteed Interview Scheme (GIS).

To secure an interview for this vacancy, along with the standard eligibility requirements for this post, your application will be assessed on how far you meet the job requirements. Your application must score the minimum amount of points set, including:

  • Eligibility Questions – You will be asked a series of questions relating to this vacancy. You must meet all of the specified criteria.


  • Initial Application Form – You will be asked a number of standard and job specific related eligibility questions. You must meet all of these criteria. You must meet the minimum amount of points on the Competency Question set.

On successful completion of these stages, you will be invited to a telephone interview and this is your guaranteed interview.


Discretion is vital. You should not discuss your application, other than with your partner or a close family member, providing that they are British. You should also make them aware of the importance of discretion. You should not post on social media sites about your application or discuss it with anyone else at this stage. You will receive further guidance during the recruitment process.

You should only launch your application from within the UK. If you are based overseas, please wait until you visit the UK to apply. Applying when outside of the UK will impact on our ability to progress with your application.

Closing Date: Ongoing

To apply for this available Job Vacancy please click here

How to Apply

Apply by clicking the link above.

Job Categories: Cyber. Job Types: Permanent. Job Tags: Job. Salary: 40,000 - 60,000.

Apply for this Job