Cybersecurity Assurance Lead – Space & Information Systems

Surrey Satellite Technology Ltd (SSTL); Guildford; On-site; GBP 90,000 - 120,000; Full time

Job summary

Surrey Satellite Technology Ltd (SSTL) is seeking an Information & Cybersecurity Assurance Manager to drive security across product and service development. You will assure contractual security obligations, certifications, and governance while supporting incident response and continuity planning.

The role requires leadership in risk assessments, Secure by Design reviews, and management of assurance artefacts, reporting to Corporate Security and collaborating with stakeholders across programs.

Qualifications

• Experience in Defence Secure by Design programme or project.
• Ability to deliver security artefacts such as Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans.
• Experience in the assurance or implementation of information or cybersecurity management systems that have achieved certification to ISO 27001, CE+, or DCC standards
• Experience in facilitating, coordinating, and directing ITHCs including, but not limited to, the writing of Security Requirements Traceability Matrix or Scoping Document, as well as the prioritisation of remediation effort
• Proficient technical understanding of information systems at an architecture, design, and audit level

Responsibilities

• Identify, understand, and provide assurance against all elements of contractual security obligations for product and service deliverables, as well as information and cybersecurity certifications such as ISO 27001, CE+, and DCC
• Ensure the delivery of relevant technical, framework and contract compliant governance, security strategies, policies, management plans, procedures, and processes, as well as supporting the review of organisational security governance in accordance with industry standards
• Own the management of information and cybersecurity assurance artefacts and security control requirements against all contracted schedules, ensuring project lifecycle gateway and milestone success
• Lead the facilitation of certification or contract dependent ITHCs, coordinate vulnerability management exercises and external penetration testing and ensure remediation actions are completed and verified
• Review infrastructure, cloud, and application designs and current implementations against Secure by Design principles and perform risk assessments for new technologies and business initiatives, as well as participate in Change Advisory Board (CAB) meetings to provide security assurance
• Support the implementation, delivery, and exercising of incident and business continuity response plans, and contribute to the lessons identified process
• Act as a member of the incident response team in the event of a security incident
• Contribute to security working groups, security steering boards, Executive and Board level reports, and any other management material as required
• Own the management of Security Aspect Letters, compliance with them, and the creation of any flow down variations to suppliers and own the management and monitoring of third-party supplier compliance
• Own the security aspects of space licensing, ensuring all requirements are complete to facilitate the effective delivery and operation of spacecraft throughout their lifecycle
• Accountable for the management of project level security budget, and contribute to accurate costing of project level security effort on future bids
• Monitor and manage the delivery of security awareness and training in accordance with contractual or certification requirements

Skills

Information security

Cyber risk management

Stakeholder influence

Incident response coordination

Security governance

Education

ChCSP

CISM

CISA

BCS CISMP

CMIRM

Tools

Security governance frameworks

Threat modeling

Incident response tooling

Vulnerability management tools

Job description

Surrey Satellite Technology Ltd (SSTL) is seeking an Information & Cybersecurity Assurance Manager to drive security across product and service development. You will assure contractual security obligations, certifications, and governance while supporting incident response and continuity planning.

The role requires leadership in risk assessments, Secure by Design reviews, and management of assurance artefacts, reporting to Corporate Security and collaborating with stakeholders across programs.