Cyber Security Governance, Risk and Assurance Specialist

BT Group; Chippenham; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Flexible working

Training & development

Pension scheme

BT & EE discounts

25 days annual leave

Volunteer days

Job summary

BT Group’s Defence security team seeks an experienced Technical Security and Information Assurance Specialist to support development and operations for sensitive customers. You will ensure solutions are Secure by Design and compliant with frameworks and legislation, reviewing cloud, hybrid, networking and on‑premise architectures.

You will act as a trusted security authority, identifying threats, managing risk and assuring systems throughout their lifecycle, working with engineering, operations,

Qualifications

• Currently hold or be capable of achieving and maintaining the required security clearance (SC minimum).
• Proven track record in security and information risk management.
• Understanding of cloud and hybrid security architectures, including on‑premise and distributed cloud models.
• Strong verbal and written communication skills.
• Experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans).

Responsibilities

• Keep abreast of emerging threats and provide thought leadership to maintain assurance for managed services.
• Work with engineering and operations to embed security requirements from the outset and maintain through life (Secure by Design).
• Apply baseline security controls to ensure compliance with policies and standards (ISO 27001, NIST, NCSC).
• Conduct threat and risk assessments, and track mitigation actions.

Skills

SC clearance

Security risk mgmt

Cloud security

Communication skills

Security documentation

Job description

Cyber Security Governance, Risk and Assurance Specialist

Location: GBR Chippenham Methuen Park House

Competitive + Benefits

BT’s Defence security team are seeking an experienced Technical Security and Information Assurance Specialist to support the development and operational environments for sensitive customers. This role is pivotal in ensuring solutions are Secure by Design, ensuring compliance with frameworks, policies, standards and legislation and able to review cloud, hybrid, networking and on premise architectures.

You will act as a trusted security authority, working closely with engineering, operations, architects, customers, assuring bodies to identify threats, manage risk and assure systems throughout their lifecycle.

What You’ll Be Doing

• Using your experience and industry knowledge, you’ll keep abreast of emerging threats and provide thought leadership to maintain assurance for some of our managed services
• Work with the existing teams, including technical and operations to understand security requirements, provide assurance and ensure security is embedded from the outset and maintained through-life (Secure by Design)
• Apply proportionate and effective security controls from baseline control sets, to ensure compliance with security policies and standards (ISO 27001, NIST, NCSC frameworks)
• Conduct threat and risk assessments, whilst recommending and tracking mitigation actions

Essential Skills / Experience

• Already hold or be capable of achieving and maintaining the required security clearance (SC as minimum)
• Have a proven track record in security and information risk management
• Demonstrable understanding of cloud and hybrid security architectures, including on premise and distributed cloud models
• Have excellent verbal and written communication skills
• Have experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans)

Desirable Skills / Experience

• Be experienced in working in major public industry sectors e.g. Defence (MoD) and/or HM Government departments or agencies
• Experience that includes working with emerging technologies, including cryptographic solutions and boundary protection technologies
• Have knowledge and experience of Cyber Security Model, Defence Policies such as JSP 440, JSP 453, DEFCON 658, DEFSTAN 05-138 and production of Cyber Implementation Plans (CIP)

Our Package

• Competitive salary and on-target bonus plan
• Flexible and smart working
• Training and development opportunities
• Competitive share options and pension scheme
• Access to discounts on BT & EE products
• 25 days annual leave (not including bank holidays)
• 3 days paid volunteering a year
• Location: Chippenham
• Weekly Hours: 37.5
• Salary: Level D
• Position Type: Full-time
• Contract: Permanent

With over 180 years of heritage, BT Business has brought together our best people and capabilities into a B2B powerhouse serving 1.2 million business customers in the UK

We’re a leader for secure connectivity and collaboration platforms for businesses of all shapes and sizes, from big household names and government departments, right through to sole traders and new start-ups. But it’s not just the technology that matters, it’s what it can do to help them build stronger, smarter, more secure businesses.

We are Customer-First Challengers, who are Committed, Clear and Connected. We value diversity and inclusion and believe in making a positive impact. We connect for good by championing digital inclusion and equipping people, businesses, and communities with digital skills to thrive.

As a member of our team, you will be part of an organisation that celebrates difference, fosters innovation and provides you with opportunities to be your best. With millions of businesses relying on us daily, joining BT means you can be part of a diverse and multi-skilled team that makes a significant impact to society.