Security Assurance Adviser

Role:
Security Assurance Advisor

Location:

London / Epsom / Birmingham / Manchester - Any location (Hybrid)

Duration: 12 Months

Day rate: £600 - £700 Inside IR35

We are seeking an experienced Security Assurance Consultant with a strong Governance, Risk & Compliance (GRC) background to support the security assurance and accreditation of secure networks and cloud environments within a UK defence-related setting.

This role will focus on maintaining security approvals, conducting risk assessments, supporting compliance activities, and ensuring alignment with MOD and wider government security standards.

• Support the implementation and continual improvement of secure network security assurance frameworks, processes and procedures.
• Maintain secure network accreditations and approvals, including risk assessments, security cases, compliance statements and supporting evidence.
• Conduct security assessments of core cloud platforms, including Microsoft 365.
• Support compliance with Defence Cyber Certification (DCC) requirements.
• Participate in cloud security assurance activities for both core and non-core cloud systems.
• Conduct compliance audits to ensure assurance activities are being completed across secure networks and cloud services.
• Monitor changes to MOD, government and industry security standards, incorporating requirements into assurance processes.
• Provide security assurance guidance to influence the design, operation and ongoing management of secure environments.
• Maintain and periodically review security risk assessments, communicating findings and tracking remediation activities.
• Monitor emerging cyber threats and assess their impact on secure networks.
• Track and report progress against security action plans.
• Engage with internal and external stakeholders, including security teams, project teams, HR vetting, procurement functions and MOD representatives.
• Support security operating procedure updates and annual reviews.
• Assist with external audits, including ISO 27001 and client-led assessments.
• Oversee the security approval and ongoing assurance of third parties connecting to or handling information from secure networks.
• Assess specialist devices requiring connection to secure networks.
• Maintain a coordinated assurance programme to ensure activities are delivered on time.
• Provide reporting support and assurance metrics as required.

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards, including:
  • Def Stan 05-138 (v3 & v4)
  • Cyber Security Model (CSM)
  • Secure by Design
  • Industry Security Notices (ISNs)
• Knowledge of UK Government security standards, including:
  • Government Security Policy Framework (SPF)
  • NCSC Cloud Security Principles
  • NCSC SaaS Security Principles
  • Cyber Essentials
  • CHECK Penetration Testing Scheme
• Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV.
• Experience conducting risk assessments using recognised methodologies such as IS1 and NIST SP 800-30.
• Strong written and verbal communication skills, with the ability to clearly justify and explain security requirements.
• Ability to build relationships with both senior stakeholders and technical teams.
• Strong organisational skills with the ability to manage multiple priorities.
• High attention to detail with a proven completer-finisher mindset.
• Competent user of Microsoft Word, Excel and PowerPoint.

• Knowledge of ISO 27001, CMMC and the NIST Cyber Security Framework, including SP 800-53.
• Familiarity with UK nuclear security regulations and ONR Security Assessment Principles (SyAPs).

security assurance grc risk assessment compliance cloud security mod standards