IT Assurance Lead

ARM LIMITED; Reading; On-site; GBP 70,000 - 100,000; Full time

Job summary

ARM LIMITED is seeking a senior security assurance professional in Reading to safeguard applications, infrastructure and cloud environments. You will drive Security by Design practices, embed secure development guidelines, and coordinate across development and operations to mitigate vulnerabilities.

The role emphasizes risk management, cross-functional leadership, and ongoing assurance across the full development lifecycle, with a focus on complex defence-like IT settings and external standards

Qualifications

• IT assurance knowledge, ideally with Defence IT or complex industries
• Strong understanding of IT assurance frameworks and standards (ISO 44001, NIST 800-53, NIS2)
• Excellent communicator with collaboration across multiple functions

Responsibilities

• Own security by design and compliance across applications, infrastructure and cloud throughout the lifecycle.
• Define secure development guidelines and ensure controls in production and development.
• Monitor and assure infrastructure and cloud security through ongoing standards adherence.
• Oversee risk management and recommend improvements to systems and processes.
• Lead cross-functional teams to deliver secure solutions aligned with programme goals.
• Drive continuous security improvements and assurance initiatives across the programme.
• Support deep IT assurance knowledge and practical application across environments.
• Engage with development, operations and programme teams to mitigate vulnerabilities and incidents.

Job description

• Security by Design & Compliance: Be responsible for safeguarding applications, infrastructure, and cloud environments throughout their lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST 800-53, NIS2, DEFSTAN, JSP's).
• Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed requirements and guarantee controls to protect critical data. Co-ordinate technical solutions to mitigate vulnerabilities during development and in production.
• Monitoring & Assurance: Assure infrastructure and cloud through continuous compliance with established standards and procedures.
• Risk Management: Oversee risk management and recommend tactical and strategic improvements to systems and processes, aligned to best practice.
• Cross Functional Leadership: Work cross-functionally and use collaborative leadership skills to assure secure solutions aligned with programme objectives.
• Continuous Improvement: Lead security enhancements and initiatives that strengthen assurance and advance compliance across the programme.
• Further education and experience, ideally in IT Assurance, or extensive experience in a Defence IT or similarly "complex" industry.
• Deep knowledge and practical experience of managing IT assurance and compliance.
• Excellent communicator with good interpersonal skills and a collaborative working style across all functions of the programme.
• Excellent time management and organisation skills, facilitating the prioritisation and running of multiple tasks in parallel against challenging requirements.
• Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST, NIST, NIS2, DEFSTAN, JSP).
• Deep understanding and experience in implementing the Security by Design framework across the full development lifecycle.
• Management experience with tools and technologies for infrastructure, cloud, and application protection.
• A proven ability to manage solutions to mitigate vulnerabilities in both development and production environments.
• Assurance skills for identifying and managing risks and incidents.
• Demonstrated ability to work effectively across development, operations, and programme teams.

Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.