Cyber Security Governance & Risk Lead – Flexible Working

BT Group; Chippenham; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Flexible working

Training and development

Share options

Pension scheme

BT & EE discounts

25 days annual leave

Volunteer days

Job summary

BT Group is seeking a Cyber Security Governance, Risk & Assurance Specialist in Chippenham to support Defence security programmes. You will lead security assurance across cloud, hybrid, and on‑premise environments and review architectures to ensure Secure by Design.

You’ll work with engineering, operations and customers to identify threats, manage risk and produce Security Management Plans and Security Cases, while embedding security from the outset and throughout the lifecycle.

Qualifications

• SC clearance (minimum) with UK nationality
• Proven track record in security and information risk management
• Understanding of cloud and hybrid security architectures
• Strong network security knowledge (WAN/LAN/WLAN)
• Excellent verbal and written communication skills
• Experience producing security documentation (Security Management Plans, Security Cases, SyOPs)
• Experience in Defence/public sector environments (Desirable)

Responsibilities

• Provide security leadership and assurance for BT Defence
• Shape BT’s secure offerings through thought leadership on new technologies
• Ensure security is embedded from outset and maintained through life
• Support sales teams to align security deliverables with project schedules
• Undertake threat and risk assessments and apply controls

Skills

Security clearance (SC)

Security risk management

Cloud security

Network security

Communication skills

Security documentation

Job description

BT Group is seeking a Cyber Security Governance, Risk & Assurance Specialist in Chippenham to support Defence security programmes. You will lead security assurance across cloud, hybrid, and on‑premise environments and review architectures to ensure Secure by Design.

You’ll work with engineering, operations and customers to identify threats, manage risk and produce Security Management Plans and Security Cases, while embedding security from the outset and throughout the lifecycle.