26347 - Control Strategy Lead

Overview of the job

• This role sits in the newly formed Security Risk Unit, within the Security, Order & Counter-Terrorism Directorate. The Unit’s objectives are to ensure HMPPS is managing its security risks effectively; identify new and emerging security risks; prioritise and plan responses to those risks; and provide the organisation with a library of knowledge for security practice. Strong risk management, risk resilience and risk practice will support HMPPS in better assessing security risks and the Agency’s tolerance to risk.
• The Control Strategy is the vehicle through which HMPPS can identify and prioritise its security risks to help enable us to achieve HMPPS business objectives. The assessment of the security risks can identify the tolerances to certain risks and vulnerability to others. For the risks where HMPPS is vulnerable, the control strategy identifies the controls which can mitigate this risk.
• The Control Strategy Lead will hold overall responsibility for designing and implementing the Control Strategy within HMPPS. The role includes line management of a small team.
• They will set up and maintain a governance programme, which will hold the senior leaders of the business to account for managing the security risks identified in their areas of responsibility.
• They will regularly report across the organisation including to front line staff, senior leaders and Ministers, using a range of effective communication methods, on the effectiveness of the identified control measures.
• This role will attract someone who enjoys working strategically, can see the “Big Picture” and can work at pace in a high-profile, rapidly evolving area of the Directorate.
• Research and analytical skills are essential, as are effective stakeholder management skills which can be demonstrated through experience influencing others.
• Experience of prison and probation is beneficial but not necessary. This is a national post, regular attendance to meetings in London and occasional travel across the HMPPS estate will be required.

Summary

• The successful candidate will have a passion for making a difference and will enjoy the challenge of learning about new and emerging security risks. Our mission is to ensure the organisation is proactive in its approach to security, ensuring resource is allocated effectively and is proportionate to the risk, providing maximum value for money for the taxpayer.
• The successful candidate will work across the organisation and externally to identify stakeholders who can support the development of the Control Strategy. The range of stakeholders will help ensure that threats and risks are suitably identified, defined and assessed, with controls suitably owned and recorded. This will include senior leaders within HMPPS, front line staff, the Ministry of Justice and building and maintaining effective working relationships with other Government departments.
• The post holder will be required to regularly update key stakeholders on the priority risks and the identified controls to ensure the continuing increased resilience across HMPPS, as well as engagement and support of the Control Strategy mission. This will require enthusiasm and a passion for the changes we are implementing.
• The post holder will be responsible for the introduction of an evaluation framework, which will provide a standardised and structured way for the organisation to measure the impact of the controls which have been implemented to manage the priority risks. This evaluation framework will be supported by an Evaluation Committee, which the post holder will help set up and manage. The introduction of an evaluation framework will support the organisation become an evidence led, data driven organisation.
• The role will require an ability to understand the bigger picture to ensure our risk tolerance is aligned to the wider business’ strategic security objectives, as well as paying due attention to short and long-term security delivery objectives.
• The jobholder will be responsible for setting up a new governance structure to support the design, implementation and measurement of the controls introduced. The governance structure will ensure stakeholder are held to account, as well as providing senior scrutiny on the work being introduced as part of the Control Strategy.
• The post holder will require effective communication skills to engage with a wide range of senior stakeholders to promote the effectiveness of the Control Strategy. They will need to build credibility rapidly with both internal and external stakeholders at senior levels. This will include seeking feedback from key stakeholders and end users to ensure the controls are effective and appropriate.
• The post holder is accountable to the Head of Risk Resilience.

Responsibilities, Activities & Duties

The post holder will be required to carry out the following responsibilities, activities and duties:

Leadership and management of the Control Strategy:

• Lead on the implementation of the Control Strategy across HMPPS
• Promote the use of the Risk Resilience Methodology as a means of identifying and assessing new risks which could impact security across HMPPS
• Support and promote the strategic direction and vision of the Security Risk Unit, work plan and deliverables
• Promote transparency in the decision making process, which in turn can help secure joint investment in addressing vulnerabilities across the organisation
• Continuously review, enhance and embed the portfolio of risks and horizon scan for future control measures
• Seek feedback from the necessary stakeholders to ensure work meets operational requirements and remains effective – this will involve appropriate measurement.
• Take ownership for the quality of the work undertaken and those under line management

Business management:

• Be an integral part in designing, developing, implementing and measuring the Control Strategy to help ensure it meets its commitment to build resilience to priority security risks
• Be accountable for the delivery of agreed outcomes on time and to budget, as well as being responsible for escalating risks and issues that arise from work
• Be accountable for effective communication of progress of control measures and providing briefings on the outputs of the risk portfolio to the Head of Risk Resilience, the Security Board, Director of SOCT, and Ministers
• Draft submissions, Parliamentary Questions and other key documents relating to the control strategy and ensure they are responded to on time and to a high standard

Promotion of risk culture:

• Promote the development of a professionalised and evidence based security risk culture to identify security risks and control measures. This might include challenging the status quo and accepted assumptions about security risk at all levels of HMPPS.
• Support the delivery of a security risk function which can quickly deliver a credible service to the operational line.
• Hold overall accountability for promoting own work and ensuring outcomes are communicated with the right stakeholders in a timely and effective manner.

Internal and External Stakeholder Management & Leadership:

• Be accountable for forming and maintaining effective working relationships internal to HMPPS and externally to ensure a collaborative approach to the control strategy. This will include working with frontline staff, across HMPPS and MoJ, academics, other Government departments, and law enforcement partners.
• Strong communication (written and verbal) required to influence and direct the work of stakeholders that impacts on the team’s delivery of objectives.

People management:

• Direct line management of a small team, which might be geographically dispersed.
• Provide leadership and direction to staff, including coaching and mentoring.
• Be responsible for the performance and development of the team, actively addressing underperformance whilst valuing the positive contributions of staff.
• Promote HMPPS values in all activities and behaviours by promoting diversity, decency, safety and reducing reoffending agendas.

The duties/responsibilities listed above describe the post as it is at present and is not intended to be exhaustive. The role is new and developing. The Jobholder is therefore expected to accept reasonable alterations and additional tasks of a similar level that may be necessary. Significant adjustments may require re-examination under the Job Evaluation Scheme.

Essential Skills, Qualifications, Accreditation & Registration

• Demonstrated ability to research across a complex portfolio of themes/ areas of work.
• Ability to develop and manage a quality service across a complex organisation, including the ability to design new products suitable to a specific operational context.
• Experience of project and/ or programme management techniques.
• Experience of influencing and managing relationships with senior stakeholders.
• Strong communication (written and verbal), leadership and partnership working skills.
• Problem-solving and decision-making skills, with the ability to drive resolution.
• Operational experience is beneficial, but not essential.