DV Cleared Cyber Security Risk & Secure-by-Design Consultant

Sanderson Government & Defence; Bristol; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid Working: 3 days onsite per week

Career Development: Continuous学习 and成长

Job summary

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant (DV Cleared) to deliver Secure by Design risk and security assurance services within MOD and Public Sector environments. You will work with cross-disciplinary teams to define and implement risk assessments and security controls, aligning with business risk appetites and transformation goals.

You will lead risk workshops, produce clear vulnerability and risk reports, and support secure design across cloud and on‑premise

Qualifications

• Active DV clearance required.
• Experience with Security Assurance roles and MOD/GDS Secure by Design.
• Knowledge of Security Control Frameworks (ISO 27001, NIST CSF).
• Experience delivering risk assessments and security governance in public sector.
• Familiarity with GDPR, PCI DSS, ICO requirements.
• Chartered or Principal membership with UK Cyber Security Council is desirable.

Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authority departments.
• Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
• Provide pragmatic remediation and risk management guidance.
• Support secure design across technology platforms including cloud infrastructures.
• Contribute to blogs and research within the Cyberfort community.

Skills

Cybersecurity

GRC

Threat modelling

Security architecture

MOD/Public Sector experience

Tools

JSP440

JSP604/453

JSP490

ISO 27001

NIST CSF

CIS Controls

Job description

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant (DV Cleared) to deliver Secure by Design risk and security assurance services within MOD and Public Sector environments. You will work with cross-disciplinary teams to define and implement risk assessments and security controls, aligning with business risk appetites and transformation goals.

You will lead risk workshops, produce clear vulnerability and risk reports, and support secure design across cloud and on‑premise