Cyber Security - Security Assurance Consultant (DV Cleared)

Sanderson Government & Defence; West of England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid Working

Career Development

Job summary

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant (DV Cleared) to deliver Secure by Design risk and security assurance services within MOD and Public Sector environments. You will collaborate with multidisciplinary teams to define risk assessments and security controls.

You will lead risk management activities, support secure design across cloud platforms, and contribute to guidance and reporting.

Qualifications

• Active DV clearance is required.
• Experience in security architecture, threat modelling or related fields in Public Sector/MOD.

Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authorities.
• Produce clear reporting on vulnerabilities, risks, controls and treatments.
• Provide remediation and risk management guidance.
• Support secure design across cloud infrastructures.
• Contribute to blogs and research within the Cyberfort community.

Skills

DV clearance

Security risk assessments

ISMS

Threat modelling

Secure by Design

MOD/Public Sector experience

Tools

Cloud security

Job description

Cyber Security GRC Consultant (DV Cleared)

Location: Hybrid / South West Region

Contract Type: Permanent & Full-time

Salary: Competitive + Benefits

About the Role

As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You’ll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You’ll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning.

Key Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authority departments.
• Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
• Provide pragmatic remediation and risk management guidance.
• Support secure design across technology platforms including cloud infrastructures.
• Contribute to blogs and research within the Cyberfort community.

Experience Required

The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management.

• Active DV clearance required
• Strong working knowledge of Security Assurance Coordinator or Delivery Team Security Lead roles
• JSP440, JSP604/453 & JSP490
• Working with system secure design & MOD/GDS Secure by Design Principles
• Supplier Chain Assurance and Risks.
• Security related legislation (e.g. GDPR, PCI DSS, ICO requirements).
• Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8.
• HMG, NPSA and NCSC security policies, standards and guidance.
• Have experience building and implementing secure by design principals within the software development lifecycle (SDLC).
• Threat Modelling – Kill Chain – Attack tree analysis.

Certifications:

AWS/Azure Security Professional, CCSP, CISSP, CISM, CIISEC, UK Cyber Security Council registration (Chartered or Principal).

What’s in it for You

• Hybrid Working
• Career Development: Continuous learning and professional growth.