Defence IT Security Assurance Lead

DXC Technology Inc.; United Kingdom; Remote; GBP 70,000 - 110,000; Full time

Job summary

DXC Technology is seeking a Security Assurance Lead to guide joint design teams in security design reviews and risk-based decision making. You will assess IT solutions for compliance with defence and government standards and collaborate with architects, vendors, and customers to strengthen security controls.

The role emphasizes threat modelling, documentation of assessment findings, and delivering clear executive summaries to stakeholders in a on-site Hampshire setting.

Qualifications

• Experience in information security including security assessment or assurance roles.
• Proven ability to conduct security design reviews and assessments.
• Strong background in defence, aerospace, or government security programmes.
• Experience with certification and accreditation processes.
• Experience leading a security/JDT team.

Responsibilities

• Conduct detailed security design reviews of IT architecture and design documentation.
• Assess security controls and identify gaps against security requirements.
• Evaluate threat models and security assumptions underlying IT designs.
• Review security specifications for completeness and compliance.
• Identify residual security risks and recommend mitigation strategies.
• Support authority leads and advise third parties.
• Prepare detailed security assessment reports documenting findings and recommendations.
• Document security control specifications and implementation guidance.
• Create security assessment matrices and compliance traceability matrices.
• Provide executive summaries of security findings for stakeholder communication.

Skills

Security design reviews

Threat modelling

IT governance

ITAR compliance

Defense/Aerospace security

Education

Bachelor's degree or equivalent in a relevant field

Tools

ISO 27001

NIST CSF

Security testing tools

Job description

DXC Technology is seeking a Security Assurance Lead to guide joint design teams in security design reviews and risk-based decision making. You will assess IT solutions for compliance with defence and government standards and collaborate with architects, vendors, and customers to strengthen security controls.

The role emphasizes threat modelling, documentation of assessment findings, and delivering clear executive summaries to stakeholders in a on-site Hampshire setting.