Cybercrime Operational Lead
- Civil Service
- Part Time
- Swinton
- 58,541 - 72,711
Job Description
Job summary
Discover what its like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here.
HMRCs Fraud Investigation Service (FIS) is responsible for the departments civil and criminal investigations.
Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime.
The FIS CODE Cybercrime Team tackles evolving cyber threats to HMRC through intelligence, investigations, forensic analysis, and cyber expertise. We provide actionable insight to strengthen systems, improve resilience, and inform countermeasures protecting HMRCs digital services. By gathering critical evidence, intelligence and data, we enable confident decision-making that secures systems used by millions of taxpayers and supports UK public services. Our work also involves disrupting major criminal networks and those who enable them.
The Team operates under 3 areas:
Strategy & Business Management: Sets and ensures delivery of the teams strategic direction in line with HMRCs wider objectives.
Technical Investigation: Uses specialist cyber investigators to carry out digital forensics, data analysis, and malware investigations to identify and develop cybercrime cases and strengthen HMRCs defence.
Intelligence, Investigation & Operational Engagement: Deploys cybercrime criminal investigators to use covert and sensitive intelligence capabilities, progress investigations, UK and international partnerships to detect cybercrime threats and respond to online criminal actors targeting HMRC services, data, and customers.
For more information about our Directorates, Lines of Business and some of our roles, please visit the FIS Careers pages https://www.civil-service-careers.gov.uk/hmrc-fraud-investigation-service/.
Job description
This role of Cybercrime Operational Lead will be an additional second post alongside an existing postholder. Together, the Cybercrime Operational Leads will provide joint responsibility to lead the growing Intelligence, Investigation & Operational Engagement area.
The role is responsible for HMRCs cybercrime intelligence and investigation strategy, delivering against FIS tactical priorities and directly supporting wider departmental and cross government strategic outcomes.
As a Cybercrime Operational Lead, you will be involved in some of the most challenging yet rewarding work within law enforcement.
Cybercriminals can be inventive and ingenious with technology, just as you will need to be innovative when using HMRCs wide-ranging legal powers and investigative techniques in response. You will use your investigative skills and cybercrime knowledge to help define, prioritise and delivery the tactical and operational strategies for cybercrime investigations.
Critical to your success are your people. Working together with the wider senior management team, you will be focused on maintaining a positive, inclusive, innovative and confident culture across the Cybercrime team. This is against a backdrop of significant and fast-paced change including continued team and capabilities expansion through Spending Review (SR) investment.
The FIS Cybercrime Team is located across HMRCs regional centres at Stratford in London, Manchester, Leeds and Nottingham. You will occasionally be required to attend these locations in addition to your home office location and may have to stay overnight. Due to the operational activity conducted by the team, you will occasionally be required to work away from the office in the UK and overseas.
Person specification
The successful candidate will
- Lead intelligence assessment and operations: Ensuring progression of appropriate investigative and disruption opportunities, directing complex, multi-agency and cross-jurisdiction investigations through to completion, working closely with CPS Cyber leads.
In order to undertake these key responsibilities, we are seeking candidates who have
- Proven success in engaging stakeholders in order to build relationships across government and law enforcement within the UK and internationally.
Successful candidates will need to effectively develop and apply subject matter expertise. This includes
- Knowledge of UK cybercrime threats, online criminal marketplaces and enabling cybercrime services, especially activity linked to cashing-out.
- Understanding of end-user devices, networks and internet services in the context of cybercrime investigations
Additional Security Information
In addition to the standard pre-employment checks for appointment into the Civil Service, all candidates must also obtain National Security Vetting at Security Check (SC) clearance level for this vacancy. You will normally need to meet the minimum UK residency period as determined by the level of vetting being undertaken, which for SC is 5 years UK residency prior to your vetting application. Once in post you will be required to apply for Developed Vetting ( DV ) clearance which has a requirement for 10 years UK residency. If you have any questions about this residency requirement, please speak to the vacancy holder for this post. This post is open to UK Nationals Only.
CODE have a support network that can offer assistance to colleagues throughout the DV process. CODE understands the experience of obtaining DV clearance affects individuals differently with the process being in depth and intrusive. The network consists of CODE DV cleared volunteers who will be able to guide you through the process and systems and look to alleviate any concerns.
Essential Criteria:
- Proven experience of leading operational teams within a law enforcement context. This will be either directing cybercrime or organised crime intelligence or investigation operations, including developing and delivering a range of strategies outcomes.
Desirable Criteria:
- Familiarity with online fraud detection systems in government, financial or the retail sector.
Further Location Information
Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a Further Location Preferences (optional) field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application.
