Cybersecurity Assurance Lead: ISO 27001 & Secure by Design

Surrey Satellite Technology Ltd (SSTL); England; On-site; GBP 90,000 - 120,000; Full time

Job summary

SSTL is seeking an Information & Cybersecurity Assurance Manager to own the security assurance across product and service deliverables, including ISO 27001, CE+, and DCC certifications, and Secure by Design implementation throughout spacecraft lifecycle.

You will lead security artefact development, risk assessments, incident response planning, and liaison with governance boards, while ensuring supplier compliance and budget oversight.

Qualifications

• Extensive Defence Secure by Design experience.
• Proven ability to deliver security artefacts (plans, risk registers, threat models, etc.).
• Experience achieving ISO 27001, CE+, or DCC certifications.
• Coordinating ITHCs and security requirements traceability.

Responsibilities

• Identify and assure contractual security obligations for product/service deliverables and certifications.
• Govern security strategies, policies, and processes compliant with industry standards.
• Manage assurance artefacts and security control requirements across contracted schedules.
• Lead ITHCs, coordinate vulnerability management and penetration testing, drive remediation.

Skills

Cybersecurity risk management

Certification knowledge

Stakeholder influence

Independent work

Education

ChCSP/CISM/CISA/BCS CISMP/CMIRM

Job description

SSTL is seeking an Information & Cybersecurity Assurance Manager to own the security assurance across product and service deliverables, including ISO 27001, CE+, and DCC certifications, and Secure by Design implementation throughout spacecraft lifecycle.

You will lead security artefact development, risk assessments, incident response planning, and liaison with governance boards, while ensuring supplier compliance and budget oversight.