DV-Cleared Senior Information Assurance Engineer

Womenempoweringdefence; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave

Flexible benefits

Flexi-Time

Job summary

Leidos UK is seeking a Senior Information Assurance Engineer to lead security assurance across UK programmes in defence, government and national security sectors. You will shape assurance strategy, drive risk-based decisions, and collaborate with customers, suppliers, and delivery teams to embed security throughout the lifecycle.

You will mature assurance processes, including NIST RMF/CSF and ISO 27001, and drive tooling, reporting and governance improvements across multiple programmes.

Qualifications

• Proven IA experience in Defence, Gov, or regulated environments.
• Knowledge of NIST RMF/CSF, ISO 27001 and government security frameworks.
• Experience leading assurance initiatives, audits and vulnerability management.

Responsibilities

• Lead Information Assurance across the system lifecycle and ensure security requirements are understood and maintained.
• Conduct risk assessments using NIST RMF/CSF and ISO 27001.
• Develop/SyOPs, RMADs, Security Impact Assessments and governance docs.
• Lead incident response capability development with plans and playbooks.
• Manage vulnerability, risk, audit, and compliance activities to drive remediation.
• Engage customers and senior stakeholders with risk-based advice and reporting.
• Provide leadership and mentorship to assurance practitioners.

Skills

Information Assurance

NIST RMF/CSF

ISO 27001

Governance & Risk

Education

Security certifications (CISM, CISSP, CRISC)

Tools

Nessus

Trivy

Tenable

Job description

Leidos UK is seeking a Senior Information Assurance Engineer to lead security assurance across UK programmes in defence, government and national security sectors. You will shape assurance strategy, drive risk-based decisions, and collaborate with customers, suppliers, and delivery teams to embed security throughout the lifecycle.

You will mature assurance processes, including NIST RMF/CSF and ISO 27001, and drive tooling, reporting and governance improvements across multiple programmes.