Information Assurance Specialist

Digital Waffle; Birmingham; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

Hybrid working model

Bristol-based office

Certification support

Job summary

Digital Waffle is seeking an experienced Information Assurance Consultant to support MOD programmes, ensuring security and information assurance are embedded throughout the lifecycle.

The role focuses on RMADs, SyOPs, and risk management with stakeholders to maintain compliance in highly regulated environments. Hybrid working with a Bristol-based office, salary up to £80,000 plus bonus.

Qualifications

• Experience in MOD security governance and accreditation documentation (RMADs).
• Proven ability to develop and review Security Operating Procedures (SyOPs).
• Ability to conduct information assurance and security risk assessments within regulated environments.

Responsibilities

• Develop, maintain, and manage RMADs per MOD policies and frameworks.
• Produce and review Security Operating Procedures (SyOPs) and security docs.
• Conduct information assurance and security risk assessments across defence projects.

Skills

MOD security governance

RMADs

SyOPs

information assurance

risk assessments

stakeholder management

Education

CISSP

CISM

Tools

RMADs

SyOPs

Job description

Location: Bristol (Remote first but on site requirements)

Salary: Up to £80,000 per annum + Bonus

Security Clearance: Must be eligible for SC clearance as a minimum (DV eligibility desirable)

We are seeking an experienced Information Assurance Consultant to support critical Ministry of Defence (MOD) programmes. This role will focus on ensuring that security and information assurance requirements are embedded throughout the system lifecycle, supporting secure delivery across complex and highly regulated defence environments

The successful candidate will possess strong experience in MOD security governance, Risk Management and Accreditation Documentation (RMADs), Security Operating Procedures (SyOPs), and information assurance activities. You will work closely with project teams, security stakeholders, and accrediting authorities to maintain compliance and manage information risk effectively.

Key Responsibilities:

• Develop, maintain, and manage RMADs in accordance with MOD security policies and frameworks
• Produce and review Security Operating Procedures (SyOPs) and supporting security documentation
• Conduct information assurance and security risk assessments across defence projects and systems
• Support security accreditation and assurance activities throughout the project lifecycle
• Provide expert guidance on information security controls, governance, and risk management
• Liaise with project teams, security architects, accrediting authorities, and customer stakeholders
• Ensure compliance with relevant MOD, government, and industry security standards
• Identify, assess, and mitigate information security risks
• Support security audits, reviews, and assurance activities
• Contribute to security governance forums and risk management procesess
• Proven experience as an Information Assurance Consultant, Security Consultant, or similar role within MOD or wider government environments
• Strong practical experience producing and maintaining RMADs
• Demonstrable experience developing and reviewing SyOPs
• Comprehensive understanding of MOD security policies, assurance frameworks, and accreditation processes
• Experience conducting security risk assessments and managing information risk
• Strong stakeholder management and communication skills
• Experience working within highly regulated or classified environments

Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)

What's on Offer

• Salary up to £80,000 per Annum
• Hybrid working model with a Bristol-based office
• Opportunity to work on high-profile MOD and defence programmes
• Professional development and certification support
• Collaborative and technically challenging environment