Security and Compliance Auditor

Hexegic; Malvern Hills; Ibrido; GBP 50.000 - 60.000; Tempo pieno

Vantaggi offerti da questo lavoro

Base salary £50k–£60k

Professional development budget

Wellness program

25 days annual leave

Hybrid working arrangements

Descrizione del lavoro

Hexegic Limited is seeking an audit professional to join its Defence Cyber Certification (DCC) team. The role focuses on guiding clients through DCC controls, framing scope and evidential criteria, and delivering gap assessments to strengthen security posture.

Ideal candidates will have audit experience, knowledge of security and cyber assurance processes, and familiarity with government infrastructure. A lead auditor qualification is a plus, with a hybrid working arrangement offered and a

Competenze

• Experience applying audit frameworks (e.g., ITGC, SOC2, ISO27001) in complex environments.
• Knowledge of security and cyber assurance processes across projects.
• Experience working in or for government infrastructure and defence contexts.
• Lead auditor qualifications are advantageous for seniority.

Mansioni

• Help clients understand DCC requirements, frame scope and evidential needs.
• Deliver DCC gap assessments and readiness reviews.
• Identify gaps and develop practical remediation plans.
• Support clients in implementing controls and preparing evidence.
• Assist risk management, governance and resilience activities.
• Run client workshops and prepare organisations for assessment.

Conoscenze

Audit frameworks

Cyber assurance

Government infrastructure

Lead auditor certs

Descrizione del lavoro

The role

This role is an excellent opportunity for an individual with audit experience to upskill and learn in the defence cybersecurity space. This is part of Hexegic's Defence Cyber Certification (DCC) team, providing audit services both internally, and to customers across government industries.

About us

Hexegic are a leading technical consultancy providing agile multi-disciplinary teams to high performing organisations. The company promises exciting, engaging and rewarding projects for those that are keen to develop and build a successful career.

Core Responsibilities

• Help clients understand DCC requirements, frame their scope and communicate evidential requirements to meet the relevant DCC controls
• Deliver DCC gap assessments and readiness reviews
• Identify gaps and develop practical, proportionate remediation plans
• Support clients in implementing controls and policies, and preparing evidence
• Support risk management, governance and resilience activities
• Run client workshops and prepare organisations for assessment

What we are looking for

• Compliance and security professional with a background recognized audit frameworks
• Knowledge of security and cyber assurance processes
• Experience working in or for government infrastructure
• Principal or lead auditor qualifications would be helpful

What's in it for you?

• Base salary of £50,000-£60,000
• £5000 a year professional development budget
• Wellness program
• 25 days annual leave
• Hybrid working arrangements

Please note that successful candidates will be expected to undertake security clearance processes funded for by Hexegic for this position, and as such to be considered you must be eligible to pass those clearances.