Cyber Security Governance, Risk and Assurance Specialist

BT Group; West of England; Hybrid; GBP 85,000 - 105,000; Full time

Benefits offered by this job

Flexible and smart working

Training and development opportunities

Competitive pension scheme

Job summary

BT Group is seeking an experienced Technical Security and Information Assurance Specialist for its Defence security team in the Bristol/Chippenham area. The role focuses on ensuring Secure by Design across cloud, hybrid, networking and on‑premise architectures, reviewing architectures, and maintaining compliance with security frameworks throughout the lifecycle.

You will act as a trusted security authority, working with engineering, operations, architects and customers to identify threats,

Qualifications

• SC clearance (minimum) or ability to achieve
• Proven track record in security and information risk management
• Understanding of cloud and hybrid security architectures, including on‑premise and distributed cloud models
• Excellent verbal and written communication skills
• Experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans)

Responsibilities

• Provide security leadership and assurance for BT Defence
• Collaborate with technical teams and operations to embed security from the outset and maintain through-life (Secure by Design)
• Apply proportionate security controls to ensure compliance with policies and standards (ISO 27001, NIST, NCSC)
• Conduct threat and risk assessments and track mitigation actions

Skills

Security clearance SC

Security & risk management

Cloud & hybrid security

Verbal & written comms

Security documentation

Job description

Career Grade: Internal D / Competitive + Benefits

Closing Date: 10th November 2026

Locations: Bristol / Chippenham

PLEASE NOTE BEFORE APPLYING: Role requires SC (Security Clearance) Minimum 5 years UK working history

About the role

BT’s Defence security team are seeking an experienced Technical Security and Information Assurance Specialist to support the development and operational environments for sensitive customers. This role is pivotal in ensuring solutions are Secure by Design, ensuring compliance with frameworks, policies, standards and legislation and able to review cloud, hybrid, networking and on premise architectures.

You will act as a trusted security authority, working closely with engineering, operations, architects, customers, assuring bodies to identify threats, manage risk and assure systems throughout their lifecycle.

What you’ll be doing

Provide security leadership and assurance for BT Defence

• Using your experience and industry knowledge, you’ll keep abreast of emerging threats and provide thought leadership to maintain assurance for some of our managed services
• Work with the existing teams, including technical and operations to understand security requirements, provide assurance and ensure security is embedded from the outset and maintained through-life (Secure by Design)
• Apply proportionate and effective security controls from baseline control sets, to ensure compliance with security policies and standards (ISO 27001, NIST, NCSC frameworks)
• Conduct threat and risk assessments, whilst recommending and tracking mitigation actions

Essential Skills / Experience

• Already hold or be capable of achieving and maintaining the required security clearance (SC as minimum)
• Have a proven track record in security and information risk management
• Demonstrable understanding of cloud and hybrid security architectures, including on premise and distributed cloud models
• Have excellent verbal and written communication skills
• Have experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans)

Desirable Skills / Experience

• Be experienced in working in major public industry sectors e.g. Defence (MoD) and/or HM Government departments or agencies
• Experience that includes working with emerging technologies, including cryptographic solutions and boundary protection technologies
• Have knowledge and experience of Cyber Security Model, Defence Policies such as JSP 440, JSP 453, DEFCON 658, DEFSTAN 05-138 and production of Cyber Implementation Plans (CIP)

Our Package

• Competitive salary and on-target bonus plan
• Flexible and smart working
• Training and development opportunities
• Competitive share options and pension scheme
• Access to discounts on BT & EE products
• 25 days annual leave (not including bank holidays)
• 3 days paid volunteering a year
• Location: Chippenham
• Weekly Hours: 37.5
• Salary: Level D
• Position Type: Full-time
• Contract: Permanent

With over 180 years of heritage, BT Business has brought together our best people and capabilities into a B2B powerhouse serving 1.2 million business customers in the UK

We’re a leader for secure connectivity and collaboration platforms for businesses of all shapes and sizes, from big household names and government departments, right through to sole traders and new start-ups. But it’s not just the technology that matters, it’s what it can do to help them build stronger, smarter, more secure businesses.

We are Customer-First Challengers, who are Committed, Clear and Connected. We value diversity and inclusion and believe in making a positive impact. We connect for good by championing digital inclusion and equipping people, businesses, and communities with digital skills to thrive.

As a member of our team, you will be part of an organisation that celebrates difference, fosters innovation and provides you with opportunities to be your best. With millions of businesses relying on us daily, joining BT means you can be part of a diverse and multi-skilled team that makes a significant impact to society.