Defence Cybersecurity Assurance Lead

BT Group; West of England; Hybrid; GBP 85,000 - 105,000; Full time

Benefits offered by this job

Flexible and smart working

Training and development opportunities

Competitive pension scheme

Job summary

BT Group is seeking an experienced Technical Security and Information Assurance Specialist for its Defence security team in the Bristol/Chippenham area. The role focuses on ensuring Secure by Design across cloud, hybrid, networking and on‑premise architectures, reviewing architectures, and maintaining compliance with security frameworks throughout the lifecycle.

You will act as a trusted security authority, working with engineering, operations, architects and customers to identify threats,

Qualifications

• SC clearance (minimum) or ability to achieve
• Proven track record in security and information risk management
• Understanding of cloud and hybrid security architectures, including on‑premise and distributed cloud models
• Excellent verbal and written communication skills
• Experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans)

Responsibilities

• Provide security leadership and assurance for BT Defence
• Collaborate with technical teams and operations to embed security from the outset and maintain through-life (Secure by Design)
• Apply proportionate security controls to ensure compliance with policies and standards (ISO 27001, NIST, NCSC)
• Conduct threat and risk assessments and track mitigation actions

Skills

Security clearance SC

Security & risk management

Cloud & hybrid security

Verbal & written comms

Security documentation

Job description

BT Group is seeking an experienced Technical Security and Information Assurance Specialist for its Defence security team in the Bristol/Chippenham area. The role focuses on ensuring Secure by Design across cloud, hybrid, networking and on‑premise architectures, reviewing architectures, and maintaining compliance with security frameworks throughout the lifecycle.

You will act as a trusted security authority, working with engineering, operations, architects and customers to identify threats,