Defence Security Assurance Lead | SC/DV Eligible | Hybrid

VIQU Limited; City Of London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

Morela is hiring a Defence Security Assurance Lead to own cyber assurance for products and services delivered to MOD and allied customers. You will build evidence-led assurance, applying Secure by Design for UK and international partners, and work with engineering, product, IT, and leadership.

You will be based hybrid in Belfast or London, with travel to customer sites, and you must hold active SC clearance with DV eligibility.

Qualifications

• Security assurance experience within UK defence or national security, with hands-on application of Secure by Design.
• Working knowledge of JSP 440 and JSP 453, plus awareness of DCPP and Def Stan 05-138.
• Experience turning technical evidence into robust assurance cases.
• Threat modelling on live systems using STRIDE, attack trees or similar methods.
• CISSP certification.
• Active SC clearance and eligibility for DV.

Responsibilities

• Lead Secure by Design for the product across defence deployments, in line with JSP 440 and JSP 453.
• Develop assurance cases using a claims, arguments and evidence approach, built to keep pace with rapid agile delivery.
• Assure AI-enabled capability against JSP 936 and the wider MOD framework landscape.
• Apply NIST CSF, RMF, AI RMF and SP 800-53 where they fit.
• Act as the main point of contact for customer risk owners and cyber assurance authorities.
• Help shape and deliver the overall security strategy, and play a key part in building out the security function as the business grows.
• Champion good security practice across engineering teams.

Skills

Security assurance

SC clearance

DV eligibility

Threat modelling

Secure by Design

JSP 440

JSP 453

Tools

STRIDE

NIST CSF

RMF

SP 800-53

Job description

Morela is hiring a Defence Security Assurance Lead to own cyber assurance for products and services delivered to MOD and allied customers. You will build evidence-led assurance, applying Secure by Design for UK and international partners, and work with engineering, product, IT, and leadership.

You will be based hybrid in Belfast or London, with travel to customer sites, and you must hold active SC clearance with DV eligibility.