G7 Head of Cybercrime Intelligence, Investigation and Engagement Stratford, London, England
Job description
Details
Reference number
Salary
Job grade
Contract type
Business area
Type of role
Working pattern
Number of jobs available
Contents
Location
About the job
Benefits
Things you need to know
Apply and further information
Location
About the job
Job summary
HMRC is the UK’s tax, payments and customs authority and we have a vital purpose: we collect the money that pays for the UK’s public services and help families and individuals with targeted financial support.
Digital Support and Innovation (DSI) and Organised Crime (OC) Operations sit within HMRC’s wider Fraud Investigation Service (FIS) responsible for the department’s civil and criminal investigation work. FIS ensures that HMRC has an effective approach to taking on the most serious tax evasion and fraud.
Working across Law Enforcement and government, DSI provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. OC looks to disrupt, frustrate and prosecute fraudsters targeting HMRC and HMRC interests. OC works across the Law Enforcement Community and globally to tackle criminals working across international boundaries to reduce the harm inflicted by Organised Crime Groups on the UK.
See what it’s like to work at HMRC: find out more about us or ask our colleagues a question. Questions relating to an individual application must be emailed as detailed later in this advert.
Job description
The Cybercrime Team is responsible for tackling the ever-changing cybercrime threats to HMRC. We achieve this through our intelligence operations and relationships, criminal investigations, forensic analysis and cyber security expertise to provide data and actionable insight, informing system and process hardening and countermeasures to improve the resilience of HMRC digital services. We collect the evidence and data that enables confident decision-making, strengthening the security of the systems used by millions of people, which collect the money that pays for the UK’s Public Services. We also support interventions directly to undermine the most significant and influential criminal groups, and those that provide the technology and services that enable them.
The Head of Cybercrime Intelligence, Investigation and Engagement is a new role that will be leading the delivery of Cybercrime’s intervention and disruption operations, directing intelligence and investigation teams across both DSI & Organised Crime operations, including officers embedded across law enforcement and intelligence partner agencies.
Person specification
You will be responsible for HMRC’s cybercrime intelligence and investigation strategy, delivering against FIS tactical priorities and directly supporting wider strategic outcomes. You will deliver through your leadership and networks, continuously developing our award-winning teams of talented cybercrime investigators, building on our strong relationships and reputation across law enforcement, intelligence, and industry sectors to support the HMRC cybercrime mission. You will energise and exploit those intelligence relationships through our embedded officers, acquiring insight into current threats to online services, often in the form of digital material. Working in partnership with the Cybercrime Technology and Strategy leads, you will ensure your teams leverage the wider technical expertise to maximise impact.
You will be directing the assessment of new intelligence received through the relationships you maintain, managing new investigative or disruptive opportunities through tasking & coordination prioritisation processes, and directing multi-agency cross-jurisdiction investigations through to their conclusion, supported by your relationship with the CPS Cyber leads. By ensuring insights into criminal techniques and vulnerabilities in HMRC systems are documented, the investigations directly inform corporate risk and mitigations. You will be carefully managing your resources, seeking alternative teams or disruptive outcomes where possible, to ensure your teams can focus on priorities.
Critical to your success are your people, and you will always be focused on maintaining a positive, inclusive, innovative and confident culture within your team. Drawing on your experience of the criminal investigation of technology-driven crimes and sensitive intelligence management, you will support and encourage proportionate use of every option available to disrupt cybercrime affecting HMRC.
Essential Criteria:
- A sound understanding of the use of digital evidence and intelligence, end-user devices, networks and internet services used in the commission and investigation of cybercrime, and applying that to direct and assure the work of specialist teams
- Success in leading teams across departments, across agencies and ideally internationally to tackle technology-enabled, financially-driven crime
- Demonstrable success in cultivating productive relationships across departments, across agencies and internationally, identifying common goals despite different missions
- Proven success in implementing strategy through tactical objectives and delivering measurable outcomes, leveraging your stakeholder relationships and political awareness
- Proven experience in criminal justice investigations, including use and oversight of sensitive intelligence powers, and assuring and developing that knowledge and expertise within your teams
- Be able demonstrate sound knowledge of the legislation that underpins the work of FIS in the criminal justice environment, in particular Regulation of Investigatory Powers Act 2000 (RIPA), Investigatory Powers Act (IPA) 2016, the Police Act 1997, Criminal Procedures and Investigations Act (CPIA) and the Police and Criminal Evidence Act (PACE), Proceeds of Crime Act 2002 (POCA)
- National Security Vetting at Developed Vetting (DV) clearance level will be required for this role. Ideally you will currently hold this clearance level, or will begin the process on acceptance of the offer if successful
Further information regarding security vetting can be found in the following link; https://www.gov.uk/guidance/security-vetting-and-clearance
Desirable Criteria:
- Be able to demonstrate an understanding of UK cybercrime threats, online criminal marketplaces, communications platforms, and enabling cybercrime services, especially cash-out.
- Experience in leading cybercrime investigations, involving malware, phishing, network intrusions and online fraud enabled by identity theft.
- Experience leading financial investigations, including the use of crypto-assets
- Experience in online fraud detection systems in government, financial or the retail sector, including common criminal methodologies
- Familiarity with Cyber Threat Intel Analysis, including open-source techniques in relation to cybercrime and attribution.
- A full driving licence
Qualifications
Behaviours
We'll assess you against these behaviours during the selection process:
- Leadership
- Seeing the Big Picture
- Communicating and Influencing
Benefits
- Learning and development tailored to your role
- An environment with flexible working options
- A culture encouraging inclusion and diversity
- A Civil Service pension with an average employer contribution of 27%
- Flexibility Payment: This post attracts a Level 1b Flexibility Payment (FP) that is paid monthly with salary. This FP requires you to undertake periods of On Call. You will be expected to work On Call 1 week in 4 or 1 week in 3 depending on grade.
In applying for a position and accepting the FP you agree that you can and will meet those attendance requirements.
FP levels are reviewed annually – on a business need and personal basis – and may be subject to change.
If you currently receive the Flexibility Payment, which may include Transition Protection and/or a Maintained Pension Value, moving to a new role may affect your payments.
Details of the Flexibility Payment can be found in the attached document.
Find more about HMRC benefits in 'Your little extras and big benefits handbook' for further information or visit Thinking of joining the Civil Service.
Things you need to know
Selection process details
As part of the application process, you will be asked to complete a CV providing your job history (max 500 words), qualifications (max 250 words), previous skills and experience (max 500 words). Please ensure you have provided reasons for any significant gaps in employment history within the last two years.
You will also be asked to provide a 750 word Personal Statement, demonstrating how you meet the essential criteria.
Please note that the Personal Statement is an important part of your application and is as much the means by which you will be assessed as your CV.
A sift will be undertaken on the CV and Personal Statement.
In the event of a large number of applications an initial sift will be carried out on the CV. If you progress to full sift, we will then review your CV and Personal Statement with successful applicants progressing to interview.
The interview will further assess your experience, Strengths and the Behaviours; Leadership, Seeing the Big Picture and Communicating and Influencing.
You will also be required to give a 15 minute presentation on Building capability to tackle a specific cybercrime threat with a hybrid response.
Sift and Interviews will take place within 5 weeks of the advert closing date. Interviews will be held face-to-face, location to be confirmed.
We reserve the right to raise the score required at any stage of the process in order to manage numbers.
A reserve list may be held for a period of up to 12 months from which further appointments may be made for the same or similar roles – if this applies to you, we’ll let you know via your Civil Service Jobs account.
Eligibility
To check that you are eligible to apply, review this eligibility information
Important information for existing HMRC contractual homeworkers:
This role may be suitable for existing HMRC employees who are contractual homeworkers. Occasional attendance to the office will be required where there is a business need, so please review the advertised office locations for this role when applying and only select locations from the ‘location preferences’ section that you are able to travel to.
Reasonable Adjustments
We want to make sure no one is put at a disadvantage during our recruitment process because of a disability, condition, or impairment. To assist you with this, we will reduce or remove any barriers where possible and provide additional support where appropriate.
If you need a reasonable adjustment or a change to be made so that you can make your application, review this information on reasonable adjustments, and contact [email protected] as soon as possible.
Equality and Diversity
We’re committed to creating a great place to work for all our colleagues here at HMRC. We want everyone to feel valued, supported and comfortable being their true self at work.
We’re proud to be a diverse and inclusive employer, supporting social mobility by giving opportunities to people from all walks of life. We want to maximise the potential of everyone who chooses to work for us and offer a range of flexible working patterns and support. Our aim is to make a fulfilling career at HMRC accessible to you.
For more information on how we make this happen, review this information on our culture and values.
Applications received from candidates with a criminal record are considered fairly in accordance with the DBS Code of Practice and the Recruitment of ex-offenders Policy.
We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible after considering operational and customer service needs. We can’t guarantee that we can meet all requests to work flexibly, as agreement will be subject to business ability to accommodate, and any request to work a more flexible arrangement should be made prior to your acceptance of the provisional offer.
Customer facing roles in HMRC require the ability to converse at ease with members of the public and provide advice in accurate spoken English and/or Welsh where required. Where this is an essential requirement, this will be tested as part of the selection process.
The Civil Service runs a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Locations
HMRC has a presence in every region of the UK. For more information on where you might be working, review this information on our locations.
Security Update
For more information on the level of security checks we will carry out, review this information on security checks
Additional Security Information
Please note: in addition to the standard pre-employment checks for appointment into the Civil Service, all candidates must also obtain National Security Vetting at Developed Vetting (DV) clearance level for this vacancy. You will normally need to meet the minimum UK residency period as determined by the level of vetting being undertaken, which for DV is 10 years UK residency prior to your vetting application. If you have any questions about this residency requirement, please speak to the vacancy holder for this post.
This role is designated a ‘reserved post’ under the Civil Service Nationality Rules and is only open to UK Nationals. In approved circumstances dual-nationals (of which one element is British) may also be granted access. Applicants must hold DV security clearance before taking up post. For the purposes of safeguarding national security, applicants who do not hold or acquire DV clearance and do not meet the nationality requirements or have conflicts that cannot be appropriately managed, will not be offered the post.
Appointment will be conditional upon satisfactory conduct and discipline checks and security vetting.
Further Information
The Civil Service values honesty and integrity and expects all candidates to abide by these principles. The evidence you provide in your application must relate to your own experiences.
Any instances of plagiarism or other forms of cheating will be investigated and, if proven, the relevant application/s will be withdrawn from the process.
Duplicate applications for the same vacancy will also be withdrawn.
Candidates must live within reasonable daily travel, of an HMRC Regional Centre.
Transferring into HMRC from Civil Service If you are currently working for an ‘Other Government Department’ (OGD) and would like to consider the impact on your pay when joining HMRC, please see the attached document "Combined T&C and OGD Pay English”, found at the bottom of this advert. Further information on staff transfers can be found on gov.uk
Problems during the application process
If you experience accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.
If you think you’ve made a mistake on a submitted application (e.g. you’ve ticked the incorrect eligibility box), please contact [email protected] at least two working days before the vacancy closes. After this, we won’t be able to reopen your application.
Please use the subject line to insert appropriate wording e.g. Please re-open my application - 284775 & vacancy closing date 8/06/2023
For reasonable adjustments queries or requests, please see details within reasonable adjustments section above.
Feedback will only be provided if you attend an interview or assessment.
Security
See our vetting charter (opens in a new window).
Nationality requirements
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Apply and further information
Contact point for applicants
Job contact :
Recruitment team
Further information
Attachments
