Information Assurance Specialist (27-45 Great Victoria Street, Belfast (N.I), United Kingdom)

BT Group; Ebbw Vale; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading telecom company in the UK seeks a Cyber Security Governance & Assurance Specialist to deliver security services and manage security obligations for customer contracts. This role involves ensuring compliance with security requirements, managing operational risks, and delivering effective security frameworks. Ideal candidates should have 3-5 years of experience in security management, strong communication skills, and the ability to maintain Security Clearance. A flexible working arrangement is possible.

Qualifications

• 3-5+ years of experience in security management.
• Experience implementing and managing security frameworks like ISO 27001.
• Ability to achieve and maintain Security Clearance.

Responsibilities

• Manage and maintain Security Governance, Risk, and Compliance for Customer Contracts.
• Deliver and verify end-to-end security services as per customer contracts.
• Monitor third-party supplier compliance with contractual obligations.
• Manage operational risks related to security requirements.

Skills

Security Clearance

Commercial awareness

Interpersonal skills

Communication skills

Decision making

Time management

ISO27001 knowledge

Security Architecture knowledge

Job description

Recruiter: Jayson Coley-Wynters

Career Grade: D / Competitive + Benefits

Internal Closing Date: 15th December 2025

Location: Belfast

NOTE: BEFORE APPLYING PLEASE NOTE THIS ROLE REQUIRES SECURITY CLEARANCE, MINIMUM 5 YEARS UK WORKING HISTORY

Job Description

Why this job matters

The Cyber Security Governance & Assurance Specialist executes a range of workstreams in delivering contributions to the BT Group's & BT Group's Customers overall cyber security risk management program, which is designed to ensure that the BT Group's & BT Group's Customers technology systems and data are adequately protected.

• Identify and understand all elements of contractual security obligations for specified Customer Contracts.
• Deliver and verify the implementation of end to end security services as defined within specified customer contracts.
• Deliver and implement ISO27001 compliant security strategies, policies, procedures, processes, threat identification & responses that provide wrap-around security services and solutions for a Customer service.
• Manage operational risks related to people, information, assets, revenues and reputation and ensure compliance with relevant security requirements, typically: National Government regulations, Contractual Obligations, company security and business continuity policy.
• Monitor and manage third party supplier compliance to the flow-down of contractual obligations from BT.
• Monitor and manage Programme security awareness.

What you'll be doing

• Management and maintain Security Governance, Risk and Compliance for specified Customer Contract(s).
• Manage Security Obligations for the Customer Contract(s) and ensure they are reviewed on a regular basis and where not compliant, appropriate mitigation is in place or contract risks raised.
• Manage, implement and measure the effectiveness of the Security framework, processes, and plans for the contract that support the security strategy and policy, taking into account risks and appropriate legal/regulatory constraints.
• Support and where applicable take ownership of customer specific elements of security strategy development and deliver within the agreed timescales.
• Monitor and manage the effectiveness/certification of the contract as required eg ISO27001, CE+, DART compliant service; by managing/monitoring compliance to the above certifications.
• Monitor and manage customer pen testing, ITHCs and associated remediation, drive and deliver Security test plans.

The skills you will need

• Achieve and maintain Security Clearance as defined in the contract.
• Excellent commercial awareness and customer facing skills
• Excellent interpersonal and communication skills
• Ability to make effective decisions and plan accordingly
• Excellent time management and prioritisation
• Understand the application of frameworks ISO27001, Security Policy Framework.
• Good level of knowledge of Security Architecture, Design, and operational processes.

The experience you will be expected to have

• Have a proven track record in security management (3 - 5 + years)
• Have demonstrable experience implementing and managing security frameworks (eg ISO 27001, CE)

Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.