Cyber Security Assurance Consultant - DV Cleared

CBSbutler Ltd.; Basingstoke; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A global IT consultancy seeks a Cyber Security Assurance Consultant in Basingstoke for an initial 6-month contract. The role involves risk management, developing security documentation, and collaborating on security assurance processes. Candidates must possess DV Clearance and demonstrate expertise in ISO27001 and NIST standards.

Qualifications

• Experience in Secure environments is highly desirable.
• Experience in Safe Agile methods is desirable.

Responsibilities

• Support delivery of secure Releases and Features through assurance processes.
• Create security assurance case for releases and conduct risk assessments.
• Liaise with Security Architects and Engineers for assurance delivery.

Skills

Cyber Security Assurance

ISO27001

NIST 800-53

Risk management

High quality communication

Job description

Cyber Security Assurance Consultant - DV Cleared

Rate: £550 - £650 a day (Inside IR35)

Location: Basingstoke (Hybrid)

Duration: Initially 6 months

Clearance: DV Clearance required

The company:

Global IT Consultancy delivering digital transformation to Defence and National Security end clients.

Overview:

As Security Assurance Consultant is part of the Security Assurance Team (SAT), providing risk management and assurance of programme artefacts.

Responsibilities and Tasks

• Support delivery of secure Releases and Features aligned with the relevant legacy or NIST assurance processes through Security Assurance stories agreed with nominated team Scrum Master
• Create security assurance case for releases, including risk assessments and mitigations for identified defects and vulnerabilities
• Liaise with Testers, Security Architects and Engineers to ensure smooth assurance process and timely delivery of contribution to assurance cases.
• Define Penetration Test and IT Health Check (ITHC) scope for relevant team
• Liaise with Joint Design Team on scope and submission of assurance case
• Keep Security Lead informed of progress within team and of any potential conflicts where Security Assurance issues may impede delivery
• Provide security approval for service support activities, including IMPEX to various systems
• Conduct daily checks (as part of rota) as required on nominated systems
• Support incident investigation and security training and briefings
• Support development of relevant security documentation; including RMADS, CoCo, RAR, SSP, POAM, OSMP (including SyOps).

Knowledge, Experience and Capabilities

• Cyber Security Assurance
• ISO27001
• NIST 800-53 series
• MOD Secure by Design
• Information assurance
• Risk management
• High quality of written and verbal communication skills
• Experience of working in Secure environments (Highly desirable)
• Experience in Safe Agile methods (Desirable)