Information & Cybersecurity Assurance Manager

iO Associates; Guildford; On-site; GBP 85,000 - 115,000; Full time

Job summary

iO Associates seeks a strategic Information & Cybersecurity Assurance Manager for a UK aerospace project. You will lead security assurance across product and service delivery, drive accreditation like ISO 27001 and DCC, and manage governance, controls, and risk assessments.

You will coordinate certification efforts and align security architecture with industry standards. You should possess qualifications such as ChCSP, CISM, CISA, CISMP or CMIRM and be eligible for UK security clearance with

Qualifications

• Must lead security assurance within defence or aerospace contexts.
• Experience creating Security Management Plans, Risk Assessments, and Security Architecture Docs.
• Strong knowledge of ISO 27001, NIST, CE+, DCC controls and related standards.
• Ability to coordinate certification processes and remediation actions.

Responsibilities

• Oversee contractual security obligations for products and services including accreditation (ISO 27001, CE+, DCC).
• Develop and maintain governance frameworks, policies and procedures.
• Lead certification, vulnerability testing, and remediation verification.
• Review security of infrastructure, cloud and applications; perform risk assessments on new tech.
• Support incident response and business continuity planning; participate in security incident teams.

Skills

Security assurance leadership

Security governance

Security artefacts development

Cybersecurity frameworks

Education

ChCSP

CISM

CISA

CISMP

CMIRM

Job description

Information & Cybersecurity Assurance Manager

We are seeking a highly skilled and strategic Information & Cybersecurity Assurance Manager to join our client’s dynamic team. Operating within the aerospace industry, our client is renowned for pioneering innovations and maintaining an exceptional reputation for quality and security standards. This is a unique opportunity to play a vital role in safeguarding critical information and contributing to cutting-edge space technology projects.

In response to strategic growth objectives and evolving regulatory requirements, this role offers an exciting challenge for a cybersecurity professional eager to influence high-stakes programmes. The position is integral to ensuring our client’s security architecture aligns with industry standards and certification requirements, underpinning the success of their innovative space endeavours.

Key Responsibilities include:

• Overseeing and assuring all contractual security obligations for product and service deliverables, including accreditation compliance such as ISO 27001, CE+, and DCC.
• Developing and maintaining governance frameworks, policies, and procedures aligned with industry standards and best practices.
• Managing cybersecurity assurance artefacts, security controls, and ensuring project milestones are met effectively.
• Leading certification processes, vulnerability assessments, and penetration testing activities, ensuring remediation efforts are carried out and verified.
• Conducting security reviews of infrastructure, cloud, and application designs and performing risk assessments on new technologies and initiatives.
• Supporting incident response strategies and business continuity plans, acting as a key member of security incident teams.
• Ensuring third‑party supplier compliance with security requirements and overseeing space licensing security obligations for spacecraft.
• Managing the security budget at project level and monitoring security awareness training compliance.

Essential skills and experience:

• Proven expertise in leading security assurance within defence or aerospace sectors, particularly regarding Secure by Design principles.
• Demonstrable experience in developing security artefacts such as Security Management Plans, Risk Assessments, and Security Architecture Documents.
• Strong technical understanding of information systems, cybersecurity frameworks (ISO 27001, NIST, CE+, DCC), and related controls.
• Ability to facilitate certification processes, including writing, coordinating, and prioritising remediation actions.
• Professional qualifications such as ChCSP, CISM, CISA, CISMP, or CMIRM.
• Eligibility for SC‑level security clearance, with proven UK residency of at least 5 years.

Preferred but not essential:

• Experience within space or aerospace communication systems.
• Knowledge of cybersecurity standards such as NIST SP 800-53.
• Higher‑level security vetting such as DV, supported by a 10‑year unbroken UK residency.

This role offers a unique chance to contribute to groundbreaking projects in a forward‑thinking organisation that values innovation, professional development, and excellence. If you are a motivated cybersecurity professional with the right experience, Join our client and be part of shaping the future of space security and exploration.