IT Assurance Lead

ARM; Reading; On-site; GBP 90,000 - 149,000; Part time

Job summary

ARM in Reading is seeking an experienced IT Assurance Lead for a 6-month contract to drive security governance across applications, infrastructure and cloud environments. You will own Security by Design, implement controls and ensure compliance with standards such as NIST, ISO, NIS2 and JSP frameworks, working closely with delivery teams.

The role requires a high level UK security clearance, strong leadership, excellent communication and a proven ability to manage assurance across development,

Qualifications

• Extensive IT assurance and compliance experience.
• Experience implementing Security by Design across the full development lifecycle.
• Excellent written and verbal communication with cross-functional collaboration skills.
• Proven ability to manage IT assurance frameworks (ISO 44001, NIST 800-53, NIS2, JSP).
• Ability to identify and mitigate vulnerabilities in development and production environments.

Responsibilities

• Security by Design & Compliance: safeguard applications, infrastructure and cloud environments throughout their lifecycle, applying defined standards.
• Secure Development: define and follow secure development guidelines; work with Dev teams to embed controls.
• Monitoring & Assurance: ensure continuous compliance with established standards.
• Risk Management: oversee risks and recommend improvements to systems and processes.
• Cross Functional Leadership: collaborate across development, operations and programme teams.
• Continuous Improvement: lead security enhancements and compliance initiatives across the programme.

Skills

IT Assurance

Security by Design

Cross-functional leadership

Communication

Risk management

Vulnerability mitigation

Job description

IT Assurance Lead

Reading

6-Months

Paying up to 108p/h (Inside IR35)

Please note - due to the nature of the work, you will need to hold a high level of UK Security clearance - please only apply if suitable

Key Responsibilities:

• Security by Design & Compliance: Be responsible for safeguarding applications, infrastructure, and cloud environments throughout their lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST 800-53, (Apply online only), (Apply online only), NIS2, DEFSTAN, JSP's).
• Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed requirements and guarantee controls to protect critical data. Co-ordinate technical solutions to mitigate vulnerabilities during development and in production.
• Monitoring & Assurance: Assure infrastructure and cloud through continuous compliance with established standards and procedures.
• Risk Management: Oversee risk management and recommend tactical and strategic improvements to systems and processes, aligned to best practice.
• Cross Functional Leadership: Work cross-functionally and use collaborative leadership skills to assure secure solutions aligned with programme objectives.
• Continuous Improvement: Lead security enhancements and initiatives that strengthen assurance and advance compliance across the programme.

Required Skillset & Experience

• Further education and experience, ideally in IT Assurance, or extensive experience in a Defence IT or similarly "complex" industry.
• Deep knowledge and practical experience of managing IT assurance and compliance.
• Excellent communicator with good interpersonal skills and a collaborative working style across all functions of the programme.
• Excellent time management and organisation skills, facilitating the prioritisation and running of multiple tasks in parallel against challenging requirements.
• Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST (Apply online only), NIST (Apply online only), NIS2, DEFSTAN, JSP).
• Deep understanding and experience in implementing the Security by Design framework across the full development lifecycle.
• Management experience with tools and technologies for infrastructure, cloud, and application protection.
• A proven ability to manage solutions to mitigate vulnerabilities in both development and production environments.
• Assurance skills for identifying and managing risks and incidents.
• Demonstrated ability to work effectively across development, operations, and programme teams.