Cyber Assurance Lead (Defence)

VIQU Ltd; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Pension

Equity options

Extra leave days

Early Friday finishes

Job summary

Morela is recruiting a Defence Security Assurance Lead to own cyber assurance for MOD and allied defence customers. The role is hybrid from Belfast or London with travel to customer sites, requiring active SC clearance and DV eligibility.

You will build evidence-led assurance, apply Secure by Design, and collaborate with engineering, product, IT, and leadership to influence the security function as the business grows.

Qualifications

• Security assurance experience in UK defence or national security.
• Hands-on application of Secure by Design.
• Knowledge of JSP 440 and JSP 453.
• Ability to turn technical evidence into robust assurance cases.
• Active SC clearance and DV eligibility.
• Threat modelling on live systems using STRIDE or similar methods.

Responsibilities

• Lead Secure by Design for the product across defence deployments, in line with JSP 440 and JSP 453
• Develop assurance cases using a claims, arguments and evidence approach
• Assure AI-enabled capability against JSP 936 and the wider MOD framework landscape
• Apply NIST CSF, RMF, AI RMF and SP 800-53 where they fit
• Act as the main point of contact for customer risk owners and cyber assurance authorities
• Help shape and deliver the overall security strategy, and build out the security function as the business grows
• Champion good security practice across engineering teams

Skills

Secure by Design

Threat modelling

NIST CSF

RMF

STRIDE

JSP 440

JSP 453

Def Stan 05-138

CISSP

SC clearance

DV eligibility

Education

CISSP certification

Job description

Defence Security Assurance Lead

Permanent | Belfast or London (Hybrid) | SC Held, DV Eligible

Morela is hiring a Defence Security Assurance Lead for a fast-growing UK sovereign AI scale-up. This is a permanent, Full time role, hybrid from either Belfast or London with travel to customer sites, reporting into the Security Lead. You will need active SC clearance and be eligible for DV. On offer is a competitive salary, pension, equity options and one of the most generous working patterns you will find anywhere.

About the Client

Our client builds a sovereign AI platform for organisations that can't compromise on security, including defence, national security, central government, policing and heavily regulated industries. They deliver real capability into some of the UK's most sensitive environments, so every feature is threat modelled, hardened and properly assured before it goes near customer data.

Security is central to the business and is now getting serious investment. The company is scaling a dedicated assurance function to match its growth in defence, and this hire is one of the founding roles in it.

The Role

You will own cyber assurance for the products and services delivered to the MOD and to allied defence and national security customers. Your job is to build the evidence-led assurance that customer risk owners depend on, applying Secure by Design for both UK and international partners.

You will work with engineering, product, IT, commercial and leadership, and directly with customers and assurance authorities. The scope is broad and will change as the business grows, so it suits someone curious and self-driven who wants a real hand in shaping a security function and a direct influence on new capability for defence.

Responsibilities

• Lead Secure by Design for the product across defence deployments, in line with JSP 440 and JSP 453
• Develop assurance cases using a claims, arguments and evidence approach, built to keep pace with rapid agile delivery
• Assure AI-enabled capability against JSP 936 and the wider MOD framework landscape
• Apply NIST CSF, RMF, AI RMF and SP 800-53 where they fit
• Act as the main point of contact for customer risk owners and cyber assurance authorities
• Help shape and deliver the overall security strategy, and play a key part in building out the security function as the business grows
• Champion good security practice across engineering teams

Essential Requirements

• Security assurance experience within UK defence or national security, with hands-on application of Secure by Design
• Working knowledge of JSP 440 and JSP 453, plus awareness of DCPP and Def Stan 05-138
• Experience turning technical evidence into robust assurance cases
• Threat modelling on live systems using STRIDE, attack trees or similar methods
• CISSP certification
• Active SC clearance and eligibility for DV

Desirable Experience

• Experience assuring AI or machine learning systems, or knowledge of JSP 936
• Understanding of AI attack types such as prompt injection, data poisoning and agent tool misuse, including MITRE ATLAS
• Familiarity with NCSC secure AI guidance and the UK AI Cyber Security Code of Practice
• Structured assurance notations such as CAE or GSN, ideally linked to machine-readable evidence
• Assurance work in air-gapped or classified environments
• Running, auditing or developing ISO management systems such as ISO 27001 or ISO 42001

Working Environment

• Permanent, full-time, hybrid from Belfast or London, with travel to customer sites
• Competitive salary, company pension and equity options in a high-growth scale-up
• A working pattern that gives back around 30 extra days a year on top of annual leave, with full four-day weeks over the summer and December, regular paid Fridays off and early Friday finishes
• Cutting-edge AI tools used as everyday working kit
• A delivery-first culture that values impact over optics and people over politics, with real influence on how the business runs as it grows