Secure by Design Manager for Defence

Standard 8; Guildford; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Standard 8 is seeking a Cybersecurity Assurance Manager to own cybersecurity and information assurance across defence programmes, products and spacecraft lifecycle. You will lead Secure by Design delivery, engage with system owners, and drive accreditation through to Authority to Operate.

The role requires hands-on delivery in a defence context and active participation in CABs, incident response, and executive reporting.

Qualifications

• Hands-on Secure by Design delivery experience in a Defence programme.
• Delivery of Security artefacts: Security Management Plans, Risk Registers, Security Requirements Documents, RMADS, Threat Models.
• Eligible for National Security Vetting at SC or above, with 5+ years unbroken UK residency.
• Hold or have held CISM, CISA, BCS CISMP, ChCSP or CMIRM.
• Membership of CIISec, IRM, or similar.
• Experience coordinating ITHCs, including scoping and remediation prioritisation.
• Technical understanding at architecture, design and audit level.

Responsibilities

• Own cybersecurity and information assurance across products, programmes and spacecraft lifecycle.
• Engage with system and design owners, run gap analyses against security controls, and drive to formal accreditation.
• Sit across Change Advisory Boards, incident response, and executive-level reporting.

Skills

Secure by Design

Delivery Leadership

CISM

CISA

BCS CISMP

ChCSP

CMIRM

CIISec

NSV eligibility

Security artefacts

ITHCs coordination

Security architecture

Job description

Cybersecurity Assurance Manager - Secure by Design

UK Defence Sector Guildford Hybrid

Must be eligible to attain National Security Vetting at SC or DV is desirable, which would require 10 years unbroken residency in the UK.

We're recruiting on behalf of a leading defence organisation for a Security Assurance Manager to own cybersecurity and information assurance across their products, programmes and spacecraft lifecycle.

This is a broad, senior assurance role - spanning certification (ISO 27001, CE+, DCC), ITHCs, Secure by Design reviews, supplier security, and space licensing assurance. You'll sit across Change Advisory Boards, incident response, and executive-level reporting.

This is the one thing that matters most for this role:

You need to have personally delivered Secure by Design assurance within a Defence programme. Not just an understanding of the framework - hands-on ownership: engaging with system and design owners, running gap analysis against security controls, and taking something through to a real outcome such as Authority to Operate or formal accreditation.

What you'll need:

• Hands-on Secure by Design delivery experience in a Defence programme - as a Delivery Team Security Lead, Delivery Team Security Engineer, or Security Assurance Coordinator
• Hold, or have held, CISM, CISA, BCS CISMP, ChCSP or CMIRM
• Membership of a cybersecurity or information risk body (CIISec, IRM, or similar)
• Eligible for National Security Vetting at SC or above, with 5+ years unbroken UK residency (DV desirable)
• Proven delivery of security artefacts - Security Management Plans, Risk Registers, Security Requirements Documents, RMADS, Threat Models
• Experience coordinating ITHCs, including scoping and remediation prioritisation
• Technical understanding at architecture, design and audit level

If you've owned Secure by Design assurance on a Defence programme and can talk through a specific example of what you delivered and what it achieved, we'd like to hear from you.