Identity Fraud Advisory, Assurance and Risk Lead

About the job

Job summary

Discover a career in your hands at HMRC. Whether you're seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it's really like to work at HMRC.

Visit our YouTube channel to watch the full series and come and discover your potential.

Our team is rapidly growing as we invest in new technologies and capabilities, and we are in search of enthusiastic individuals who can help us in achieving our mission. We are continually improving the service we give to our customers and, in line with this, we are creating a new response and management team within the HMRC Fraud Prevention Centre.

The Fraud Prevention Centre (FPC) is a strategic capability within HMRC Security, designed to safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver a holistic approach to fraud prevention.

Job description

The Identity Fraud Advisory, Assurance and Risk Lead will lead the Fraud Prevention Centre's identity fraud advisory, assurance, and risk assessment services through a small specialist SO team. The role ensures HMRC projects, programmes and live services understand relevant fraud design requirements and proactively embed them into service design, delivery, and operational practice from the outset. Through the FPC Service Clinic, Guardrails and Keyholder Co-ordination, and Identity Fraud Risk Assessment services, the postholder will help identify identity fraud risks earlier, clarify control expectations, strengthen evidence for design choices, and improve protection against preventable loss and harm.

The postholder will lead complex business engagement, marshal identity fraud subject matter expertise, support the Security Front Door process, and provide coordinated advice, challenge, insight and senior reporting to help projects and services understand their control obligations, embed fraud protection in practice, reduce identity fraud risk, protect public money, strengthen service resilience and maintain public trust.

The successful candidate will be an experienced leader who can operate across advisory, assurance, governance, risk, and delivery environments. They will be able to lead through others, build credibility with senior stakeholders, marshal subject matter expertise and translate complex fraud, risk, security and control concepts into clear business advice, practical products, tools and senior-level reporting that help projects and services understand, adopt and evidence fraud design requirements.

Person specification

Strategic Leadership

• Lead the delivery and continuous improvement of the Fraud Prevention Centre's identity fraud advisory, assurance, and risk assessment services, ensuring they help projects and services understand control expectations, make informed design choices, and apply fraud protection requirements consistently across the service lifecycle.
• Set the direction for the FPC Service Clinic, Identity Fraud Guardrails and Keyholder Co-ordination, and Identity Fraud Risk Assessment services so they operate as coherent, evidence-led, and customer-focused functions that drive early awareness, adoption, and ownership of fraud protection controls.
• Use insight from demand, risk assessments, and stakeholder engagement to shape future priorities, capability development, and continuous improvement.
• Ensure the services deliver visible outcomes, including improved risk ownership, clearer control decisions, stronger evidence for assurance, better prioritisation of identity fraud prevention activity and greater confidence that fraud protection is embedded in practice.

Identity Fraud Prevention Service Clinic

• Lead the Identity Fraud Prevention Service Clinic as a structured advisory and assurance forum for service owners, programmes and change teams.
• Marshal input from FPC, RIS, FIS, OE, R&RM, and other specialists to provide joined-up fraud protection guidance, constructive challenge, and evidence-led recommendations.
• Use the Service Clinic to provide early, practical support to projects and service owners so fraud risks, fraud protection control expectations and design implications are understood before key delivery decisions are made.
• Ensure clinic outputs result in clear actions, practical recommendations and documented decisions that help service owners meet fraud design requirements and reduce avoidable rework later in delivery.

Guardrails and Keyholder Co-ordination

• Lead assurance over the application of identity fraud guardrails, standards and fraud protection controls across the service and project lifecycle, ensuring they are translated into practical requirements that projects and services can apply, evidence and maintain in day-to-day delivery.
• Maintain visibility of identity fraud protection guardrails, keyholder decisions, exceptions, and their application across HMRC.
• Promote consistency, accountability, and risk-based decision-making through engagement with design authorities, governance forums, business cases and change initiatives.
• Ensure guardrail activity leads to transparent, consistent, and auditable decisions, with control requirements, exceptions, residual risks and required mitigations clearly recorded and escalated where appropriate.

Identity Fraud Risk Assessment

• Lead delivery of Identity Fraud Risk Assessments across HMRC services, processes and change activity, helping projects and services identify control gaps and agree proportionate mitigations.
• Develop and refine current and future IFRA methodology, tooling and supporting materials, promoting their use and value with service owners, programmes, and relevant stakeholders.
• Work with R&RM programme leads, service owners and other identity fraud stakeholders to inform decisions on proportionate controls and mitigations, aligned with TRCF, wider risk approaches and the R&RM Value stage activity.
• Use IFRA findings to provide senior insight and evidence on risk, control effectiveness, emerging themes and areas for future intervention, review, prioritisation, and investment, including in support of the wider R&RM programme and Value stage.
• Ensure risk assessment outputs provide clear conclusions, prioritised recommendations, and evidence that support investment, remediation, future control design, and practical embedding of fraud protection in operational practice.

Stakeholder Engagement and Governance

• Personally lead engagement with senior business stakeholders, service owners, programmes, and specialist teams to build awareness and understanding of fraud prevention expectations, shape demand, coordinate subject matter expertise and ensure fraud protection requirements are understood early and owned by the right business areas.
• Support the Security Front Door process by identifying identity fraud prevention considerations, clarifying fraud protection control expectations, routing demand to the right expertise and coordinating advice with wider security and fraud activity.
• Represent FPC at relevant governance forums and provide clear briefings, recommendations, management information and senior reporting to support decision-making, accountability, and wider R&RM programme priorities.
• Ensure stakeholder engagement results in well-understood demand, agreed ownership, timely advice and decisions that are visible through appropriate governance and reporting routes, with projects and services clear on what they need to embed and evidence.

Leadership of the SO Team and Continuous Improvement

• Provide leadership, coaching and direction to a small specialist SO team, setting clear priorities and ensuring high-quality delivery.
• Lead the development of guidance, playbooks, templates, checklists, and tools that make it easier for project and service owners to understand fraud design requirements and build them into design, delivery, and live operation.
• Build organisational capability and foster a culture of collaboration, continuous improvement, constructive challenge, and evidence-based decision making.
• Ensure the team delivers consistent, high-quality outputs that are reusable, evidence-based and aligned to agreed priorities, service standards, and continuous improvement objectives.

Essential Criteria

• Experience of leading advisory, assurance, risk management, or control-related services in a complex organisational environment.
• Ability to lead delivery through others, marshalling subject matter expertise and coordinating input from multiple specialist functions.
• Strong stakeholder engagement and influencing skills, including experience of leading complex or senior engagements, understanding business needs and securing ownership for agreed fraud protection requirements.
• Experience of applying standards, frameworks, guardrails, controls, or assurance approaches to support risk-based decision making.
• Strong understanding of risk management principles, including the ability to assess risks, identify control gaps and recommend proportionate mitigations.
• Excellent communication skills, including the ability to provide constructive challenge . click apply for full job details