Secure by Design Governance & Risk Specialist

BT Group; Chippenham; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Flexible working

Training & development

Pension scheme

BT & EE discounts

25 days annual leave

Volunteer days

Job summary

BT Group’s Defence security team seeks an experienced Technical Security and Information Assurance Specialist to support development and operations for sensitive customers. You will ensure solutions are Secure by Design and compliant with frameworks and legislation, reviewing cloud, hybrid, networking and on‑premise architectures.

You will act as a trusted security authority, identifying threats, managing risk and assuring systems throughout their lifecycle, working with engineering, operations,

Qualifications

• Currently hold or be capable of achieving and maintaining the required security clearance (SC minimum).
• Proven track record in security and information risk management.
• Understanding of cloud and hybrid security architectures, including on‑premise and distributed cloud models.
• Strong verbal and written communication skills.
• Experience producing and presenting security documentation (Security Management Plans, Security Cases, Risk Treatment Plans).

Responsibilities

• Keep abreast of emerging threats and provide thought leadership to maintain assurance for managed services.
• Work with engineering and operations to embed security requirements from the outset and maintain through life (Secure by Design).
• Apply baseline security controls to ensure compliance with policies and standards (ISO 27001, NIST, NCSC).
• Conduct threat and risk assessments, and track mitigation actions.

Skills

SC clearance

Security risk mgmt

Cloud security

Communication skills

Security documentation

Job description

BT Group’s Defence security team seeks an experienced Technical Security and Information Assurance Specialist to support development and operations for sensitive customers. You will ensure solutions are Secure by Design and compliant with frameworks and legislation, reviewing cloud, hybrid, networking and on‑premise architectures.

You will act as a trusted security authority, identifying threats, managing risk and assuring systems throughout their lifecycle, working with engineering, operations,