MOD Security Assurance Lead - SbD & NIST (Hybrid)

CBSbutler; Corsham; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

CBSbutler is seeking an experienced Security Assurance Coordinator to support a MOD OpNET programme. You will lead governance, risk management and compliance across environments, ensuring Secure by Design and JSP 440/604 alignment.

The role involves coordinating assurance activities with project teams and security functions. You will manage security risks, prepare evidence of compliance and drive security controls across physical, procedural and technical domains, while liaising with

Qualifications

• Proven experience in security assurance, information assurance and cyber security governance.
• Experience managing security risk and implementation of controls using recognized frameworks.
• Knowledge of MOD security policies JSP 440 and JSP 604.
• Experience coordinating risk assessments and remediation activities.
• Familiarity with NIST methodologies and security control development.

Responsibilities

• Provide security assurance advice in line with MOD Secure by Design principles.
• Conduct security risk assessments and manage remediation actions.
• Develop assurance evidence, SyOPs and awareness briefings.
• Implement and monitor security controls (physical, personnel, technical).
• Coordinate third‑party checks and penetration testing activities.
• Review designs and documentation for security compliance.
• Identify cyber threats and advise mitigations.
• Integrate security controls with MOD/OpNET security operations.

Skills

Security assurance

Information assurance

Cyber security governance

Security risk management

JSP 440

JSP 604

NIST frameworks

Job description

CBSbutler is seeking an experienced Security Assurance Coordinator to support a MOD OpNET programme. You will lead governance, risk management and compliance across environments, ensuring Secure by Design and JSP 440/604 alignment.

The role involves coordinating assurance activities with project teams and security functions. You will manage security risks, prepare evidence of compliance and drive security controls across physical, procedural and technical domains, while liaising with