DV-Cleared Security Assurance Analyst

Sanderson Government & Defence; Farnborough; On-site; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Competitive salary & benefits

Enhanced pension

Flexible working arrangements

Professional development and security

Job summary

Sanderson Government & Defence in Farnborough is seeking a Security Assurance Analyst with DV clearance to join our on-site team. You will lead security design reviews, assess controls and ensure alignment with MOD requirements, supporting certification and accreditation activities.

The role emphasises risk assessment, documentation, and stakeholder communication to senior management, with a focus on defensive security across IT architectures and systems.

Qualifications

• Knowledge of IT security controls across networks, apps and data.
• Ability to model threats and assess risk in complex IT designs.
• Familiarity with MOD security requirements and classifications.
• Understanding of ISO 27001 and NIST CSF security frameworks.
• Experience conducting security risk assessments and mitigation planning.

Responsibilities

• Security design reviews of IT architecture and documentation.
• Verify compliance with Defence Security Policy and MOD standards.
• Create and maintain security assessment reports and matrices.
• Provide stakeholder briefings and executive summaries on findings.
• Support risk management and assurance activities for MOD approvals.
• Validate implemented security controls and evidence for accreditation.

Skills

IT security controls

Threat modelling

MOD security requirements

ISO 27001 / NIST CSF

Security risk assessment

Education

CISSP or CISM certification

Job description

Sanderson Government & Defence in Farnborough is seeking a Security Assurance Analyst with DV clearance to join our on-site team. You will lead security design reviews, assess controls and ensure alignment with MOD requirements, supporting certification and accreditation activities.

The role emphasises risk assessment, documentation, and stakeholder communication to senior management, with a focus on defensive security across IT architectures and systems.