DV-Cleared Cyber Risk & Assurance Lead - Remote

Sanderson Government & Defence; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant with active DV clearance to support Secure by Design risk and security assurance services in MOD and Public Sector environments.

You will lead risk management activities, drive ISMS initiatives, and facilitate security workshops with government departments, delivering clear vulnerability and risk reporting while guiding remediation and secure SDLC practices.

Qualifications

• Active DV clearance required.
• Experience in cybersecurity, security architecture, threat modelling in Public Sector/MOD.
• Working towards or achieved CIISEC and UK Cyber Security Council Chartered/Principal membership.

Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authority departments.
• Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
• Provide pragmatic remediation and risk management guidance.
• Support secure design across technology platforms including cloud infrastructures.
• Contribute to blogs and research within the business community.

Skills

Threat Modelling

Risk Assessment

Security Architecture

ISMS

Cloud Security

Security Governance

Secure SDLC

Tools

JSP440

JSP604/453

JSP490

ISO 27001

NIST CSF

CIS Controls v8

Cloud Security Tools

Job description

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant with active DV clearance to support Secure by Design risk and security assurance services in MOD and Public Sector environments.

You will lead risk management activities, drive ISMS initiatives, and facilitate security workshops with government departments, delivering clear vulnerability and risk reporting while guiding remediation and secure SDLC practices.