Cyber Security Specialist

Morson Group; Greater London; Hybrid; GBP 100,000 - 132,000; Full time

Job summary

The Morson Group is seeking an experienced Cyber Security Specialist to support the delivery of security assurance across complex IT and cloud environments in a hybrid London setting.

The role focuses on governance, risk and compliance, delivering security assurance, risk assessments, regulatory compliance and governance with highly regulated environments. The candidate will engage with stakeholders and drive security controls to meet government standards.

Qualifications

• Experience in security assurance and governance in regulated environments.
• Ability to conduct security risk assessments using recognized methods.
• Experience with government security standards and frameworks.
• Strong written and verbal communication to stakeholders.
• Ability to manage multiple risk and assurance activities.
• Experience supporting external audits and certifications.

Responsibilities

• Lead security assurance activities across IT and cloud environments.
• Develop and maintain assurance frameworks, policies and governance.
• Produce risk assessments and compliance statements.
• Oversee compliance with government security requirements and standards.
• Coordinate audits and assist with ISO 27001 and client assessments.
• Report findings to governance forums and management.

Skills

GRC background

Security assurance

Regulatory compliance

Security governance

Risk assessments

ISO 27001

Tools

Word

Excel

PowerPoint

Job description

Cyber Security Specialist

12 Month Duration

£628 per day - Inside IR35

Hybrid - London

Overview

My client seeking an experienced Cyber Security Assurance professional to support the development and delivery of security assurance activities across complex IT and cloud environments.

The successful candidate will have a strong Governance, Risk and Compliance (GRC) background, with experience in security assurance, risk assessments, regulatory compliance and security governance within highly regulated environments.

You will play a key role in maintaining security assurance frameworks, overseeing compliance activities, advising stakeholders and ensuring that security risks are identified, assessed and appropriately managed. The role will involve working closely with technical teams, senior stakeholders and external organisations to ensure that security controls meet relevant government, industry and organisational standards.

Key Responsibilities

• Lead and coordinate security assurance activities across secure IT infrastructure, cloud platforms and associated services.

• Develop, maintain and improve security assurance frameworks, policies, procedures and governance processes.

• Produce and maintain security risk assessments, security justifications, compliance statements and supporting assurance documentation.

• Conduct security assessments of cloud-based systems, including Microsoft 365, and other core business platforms.

• Oversee compliance with relevant government security requirements, industry standards and recognised security frameworks.

• Carry out compliance audits to ensure security policies, controls and assurance activities are implemented effectively.

• Provide security assurance guidance throughout the design, implementation and operation of IT infrastructure and cloud environments.

• Regularly review security risks, communicate findings to stakeholders and track remediation activities through to completion.

• Monitor emerging cyber threats, vulnerabilities, regulatory developments and changes to security guidance, incorporating these into assurance processes.

• Coordinate security action plans and monitor progress across technical teams, business functions and external suppliers.

• Work collaboratively with security teams, IT professionals, project managers, procurement, HR and senior leadership.

• Support external audits and certification activities, including ISO 27001 and client-led security assessments.

• Assess and manage the security risks associated with third-party suppliers, systems, software, hardware and services connecting to secure environments.

• Develop and maintain Security Operating Procedures and supporting security documentation.

• Coordinate and manage the delivery of security assurance activities, ensuring deadlines and governance requirements are met.

• Prepare reports, recommendations and updates for security governance forums and senior management.

• Support the development of a structured security assurance function, including processes, communication channels, reporting mechanisms and document repositories.

• Provide assurance over relevant elements of the technology supply chain.

Essential Skills and Experience

• Demonstrable experience working in cyber security, particularly within government, defence, critical infrastructure or similarly regulated environments.

• Strong knowledge of security governance, risk management, compliance and assurance practices.

• Experience applying UK government and defence security standards, including Def Stan 05-138, the Defence Cyber Protection Partnership Cyber Security Model and Secure by Design principles.

• Familiarity with UK government security frameworks and guidance, including the Security Policy Framework, NCSC Cloud Security Principles, secure Software as a Service (SaaS) guidance and Cyber Essentials.

• Understanding of personnel and physical security principles within regulated environments.

• Experience conducting structured security risk assessments using recognised methodologies, such as NIST SP 800-30 or equivalent approaches.

• Strong written and verbal communication skills, with the ability to explain security risks, controls and recommendations clearly to technical and non-technical audiences.

• Proven ability to engage effectively with stakeholders at all levels, including senior leadership and technical teams.

• Excellent organisational skills, attention to detail and the ability to manage competing priorities.

• Proficiency in Microsoft Word, Excel and PowerPoint.

Desirable Skills and Experience

• Familiarity with international security standards and frameworks, including ISO 27001, the Cybersecurity Maturity Model Certification (CMMC) and the NIST Cybersecurity Framework.

• Knowledge of NIST SP 800-53 security controls.

• Experience working with nuclear industry security regulations, including Office for Nuclear Regulation (ONR) Security Assessment Principles.

• Familiarity with corporate security policies, assurance methodologies and governance processes.

• Experience supporting security certification, external audits and continuous improvement programmes.

Personal Attributes

• Highly organised, thorough and delivery-focused, with a strong eye for detail.

• Proactive in identifying risks, resolving issues and improving assurance processes.

• Confident working independently while collaborating effectively with multidisciplinary teams.

• Able to communicate complex technical and security matters in a clear, structured and practical way.

• Comfortable managing multiple workstreams and maintaining accurate, high-quality documentation.