Cyber Security GRC & Assurance Specialist

BT plc; Chippenham; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Bonus plan

Flexible working

Training opportunities

Share options

Pension scheme

Discounts on BT/EE products

25 days annual leave

Volunteer days

Job summary

BT plc in Chippenham seeks a Cyber Security Governance, Risk and Assurance Specialist to lead security for BT Defence, ensuring Secure by Design across cloud, hybrid and on‑premise architectures while aligning with policy and legislation.

As a trusted security authority, you’ll work with engineering, operations and customers to identify threats, manage risk and assure systems throughout their lifecycle, with strong written and spoken communication and security documentation experience.

Qualifications

• Hold or be able to attain the required security clearance (SC) minimum.
• Proven track record in security and information risk management.
• Understanding of cloud and hybrid security architectures, including on-premise and distributed cloud models.
• Excellent verbal and written communication skills.
• Experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans).

Responsibilities

• Provide security leadership and assurance for BT Defence.
• Keep abreast of emerging threats and provide thought leadership to maintain assurance for managed services.
• Collaborate with engineering and operations to embed security requirements from the outset and maintain security through life (Secure by Design).
• Apply proportionate security controls to ensure compliance with security policies and standards (ISO 27001, NIST, NCSC).
• Conduct threat and risk assessments, and track mitigation actions.

Skills

SC clearance

Security risk management

Cloud security

Communication skills

Security documentation

Job description

BT plc in Chippenham seeks a Cyber Security Governance, Risk and Assurance Specialist to lead security for BT Defence, ensuring Secure by Design across cloud, hybrid and on‑premise architectures while aligning with policy and legislation.

As a trusted security authority, you’ll work with engineering, operations and customers to identify threats, manage risk and assure systems throughout their lifecycle, with strong written and spoken communication and security documentation experience.