Cyber Security Assurance Specialist

Proactive Appointments; England; Hybrid; GBP 92,000 - 129,000; Full time

Job summary

Proactive Appointments is seeking an experienced Cyber Security Assurance Specialist on a contract basis, initially for 6 months, outside IR35, SC-cleared, hybrid working with 3 on-site days per week in Oxfordshire.

The role demands designing and implementing secure cloud and infrastructure, conducting risk assessments, managing governance frameworks, and producing clear risk reports for senior stakeholders.

Qualifications

• SC clearance is required (CURRENT).
• Experience designing and implementing secure infrastructure or cloud architectures.
• Proven experience with risk assessment methodologies and enterprise risk registers.
• Strong knowledge of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks.
• Experience with Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix.
• Experience conducting security audits and implementing remediation plans.
• Ability to communicate risk to non-specialists and produce technical reports.
• Hybrid work pattern with 3 days on-site weekly in Oxfordshire.

Skills

Security certifications

Cloud security design

Risk assessment methods

Governance frameworks

Azure/M365 security

Vulnerability management

SIEM/EDR/XDR

RBAC/ABAC policy

Stakeholder reporting

Threat intel interpretation

Tools

SIEM tooling

EDR/XDR

Vulnerability mgmt

Azure AD

Job description

Cyber Security Assurance Specialist - SC Cleared - Outside IR35 - Hybrid

Our client is urgently looking for an experienced Cyber Security Assurance Specialist to join their team on a contract basis, initially for 6 months with a view to extend.

Please note:

• The role is OUTSIDE of IR35
• The role requires CURRENT SC Clearance
• The role is Hybrid, with 3 days on-site each week in Oxfordshire

Cyber Security Assurance Specialist - Key Skills:

• Security Assurance certifications such as CCP, SIRA
• Security certifications such as CISSP, SSCP, CISM, CRISC, CCSP, SABSA, or SANS GIAC (GSEC, GCCC, GCPM).
• Demonstrable experience in designing and implementing secure infrastructure or cloud architectures.
• Proven experience with risk assessment methodologies and maintaining enterprise risk registers.
• Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating).
• Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks.
• Experience conducting or supporting security audits and implementing remediation plans.
• Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix.
• Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms.
• Hands-on experience with policy development, access control models (RBAC, ABAC), and logging standards.
• Experience supporting assurance activities or government-mandated reviews (e.g. GovAssure, Secure by Design).
• Ability to interpret CVEs, CVSS scores, and threat intelligence feeds.
• Strong stakeholder engagement and communication skills with an ability to produce technical reports and articulate risk to non-specialists.
• Excellent written and verbal communication skills with the ability to present to senior stakeholders.

Cyber Security Assurance Specialist - SC Cleared - Outside IR35 - Hybrid