Information Assurance Consultant

Digital Waffle; West of England; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Hybrid working

Office in Bristol

Job summary

Digital Waffle is seeking an experienced Information Assurance Consultant to support MOD programmes in a hybrid Bristol setting. You will embed security and information assurance throughout the system lifecycle, working with project teams, security stakeholders and accrediting authorities to maintain compliance and manage information risk.

The role requires strong RMADs, SyOPs, and risk management capabilities, with SC/DV-ready eligibility.

Qualifications

• Proven experience as an Information Assurance Consultant in MOD or government settings.
• Strong track record maintaining RMADs and RM documentation.
• Experience developing and reviewing SyOPs.
• Deep understanding of MOD security policies, assurance frameworks, and accreditation processes.
• Experience conducting security risk assessments and managing information risk.
• Excellent stakeholder management and communication skills.
• Experience working in highly regulated or classified environments.
• Certifications: CISSP and CISM.

Responsibilities

• Develop, maintain, and manage RMADs in line with MOD policies.
• Produce and review Security Operating Procedures (SyOPs) and related docs.
• Carry out information assurance and security risk assessments on defence projects.
• Support security accreditation and assurance activities through the lifecycle.
• Provide guidance on information security controls, governance, and risk management.
• Liaise with project teams, security architects, accrediting authorities, and customers.
• Ensure compliance with MOD, government, and industry security standards.
• Identify, assess, and mitigate information security risks.
• Support security audits, reviews, and assurance activities.
• Contribute to security governance forums and risk management processes.

Skills

RMADs

SyOPs

MOD policies

Security risk assessments

Stakeholder management

Classified environments

CISSP

CISM

Job description

Location: Bristol (Hybrid Working) Salary: Up to £80,000 per annum + Bonus Security Clearance: Must be eligible for SC clearance as a minimum (DV eligibility desirable)

We are seeking an experienced Information Assurance Consultant to support critical Ministry of Defence (MOD) programmes. This role will focus on ensuring that security and information assurance requirements are embedded throughout the system lifecycle, supporting secure delivery across complex and highly regulated defence environments. The successful candidate will possess strong experience in MOD security governance, Risk Management and Accreditation Documentation (RMADs), Security Operating Procedures (SyOPs), and information assurance activities. You will work closely with project teams, security stakeholders, and accrediting authorities to maintain compliance and manage information risk effectively.

Key Responsibilities

• Develop, maintain, and manage RMADs in accordance with MOD security policies and frameworks
• Produce and review Security Operating Procedures (SyOPs) and supporting security documentation
• Conduct information assurance and security risk assessments across defence projects and systems
• Support security accreditation and assurance activities throughout the project lifecycle
• Provide expert guidance on information security controls, governance, and risk management
• Liaise with project teams, security architects, accrediting authorities, and customer stakeholders
• Ensure compliance with relevant MOD, government, and industry security standards
• Identify, assess, and mitigate information security risks
• Support security audits, reviews, and assurance activities
Contribute to security governance forums and risk management processes

Essential Skills & Experience

• Proven experience as an Information Assurance Consultant, Security Consultant, or similar role within MOD or wider government environments
• Strong practical experience producing and maintaining RMADs
• Demonstrable experience developing and reviewing SyOPs
• Comprehensive understanding of MOD security policies, assurance frameworks, and accreditation processes
• Experience conducting security risk assessments and managing information risk
• Strong stakeholder management and communication skills
• Experience working within highly regulated or classified environments
• Certifications CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager)

What's on Offer

• Salary up to £80,000 per Annum
• Hybrid working model with a Bristol-based office
• Opportunity to work on high-profile MOD and defence programmes
• Professional development and certification support
• Collaborative and technically challenging environment