Security Assurance Adviser

Experis UK; Greater London; Hybrid; GBP 156,000 - 182,000; Full time

Job summary

Experis UK is seeking a Security Assurance Advisor for hybrid roles across London, Epsom, Birmingham and Manchester. The contract runs 12 months with a day rate of £600–£700 Inside IR35.

You will support governance, risk and compliance activities to secure networks and cloud environments within a UK defence context. Responsibilities include maintaining accreditations, conducting risk assessments, assessing Microsoft 365 cloud security, and aligning with MOD/government standards.

Qualifications

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards (Def Stan 05-138, Cyber Security Model, Secure by Design, ISNs).
• Knowledge of UK Government security standards (SPF, NCSC Cloud/SaaS, Cyber Essentials, CHECK).
• Familiarity with UK Government physical and personnel security requirements (NPSA, UKSV).
• Experience conducting risk assessments using IS1 and NIST SP 800-30.

Responsibilities

• Support secure network security assurance frameworks, processes and procedures.
• Maintain secure network accreditations and approvals, including risk assessments and security cases.
• Conduct security assessments of core cloud platforms (e.g., Microsoft 365).
• Support DCC compliance requirements and cloud security assurance activities.
• Engage with MOD representatives, security teams and HR/vetting procedures.
• Monitor security standards updates and incorporate into assurance processes.
• Provide security assurance guidance for design and operation of secure environments.
• Track remediation activities and report progress against action plans.
• Support external audits (ISO 27001 and client-led assessments).
• Oversee third-party connections to secure networks and specialist devices.

Skills

Cyber security

GRC

Stakeholder comms

Risk assessment

Security standards knowledge

Tools

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Job description

Role: Security Assurance Advisor
Location: London / Epsom / Birmingham / Manchester - Any location (Hybrid)
Duration: 12 Months
Day rate: £600 - £700 Inside IR35
We are seeking an experienced Security Assurance Consultant with a strong Governance, Risk & Compliance (GRC) background to support the security assurance and accreditation of secure networks and cloud environments within a UK defence-related setting.

This role will focus on maintaining security approvals, conducting risk assessments, supporting compliance activities, and ensuring alignment with MOD and wider government security standards.

Key Responsibilities

• Support the implementation and continual improvement of secure network security assurance frameworks, processes and procedures.
• Maintain secure network accreditations and approvals, including risk assessments, security cases, compliance statements and supporting evidence.
• Conduct security assessments of core cloud platforms, including Microsoft 365.
• Support compliance with Defence Cyber Certification (DCC) requirements.
• Participate in cloud security assurance activities for both core and non-core cloud systems.
• Conduct compliance audits to ensure assurance activities are being completed across secure networks and cloud services.
• Monitor changes to MOD, government and industry security standards, incorporating requirements into assurance processes.
• Provide security assurance guidance to influence the design, operation and ongoing management of secure environments.
• Maintain and periodically review security risk assessments, communicating findings and tracking remediation activities.
• Monitor emerging cyber threats and assess their impact on secure networks.
• Track and report progress against security action plans.
• Engage with internal and external stakeholders, including security teams, project teams, HR vetting, procurement functions and MOD representatives.
• Support security operating procedure updates and annual reviews.
• Assist with external audits, including ISO 27001 and client-led assessments.
• Oversee the security approval and ongoing assurance of third parties connecting to or handling information from secure networks.
• Assess specialist devices requiring connection to secure networks.
• Maintain a coordinated assurance programme to ensure activities are delivered on time.
• Provide reporting support and assurance metrics as required.

Essential Skills & Experience

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards, including:
  • Def Stan 05-138 (v3 & v4)
  • Cyber Security Model (CSM)
  • Secure by Design
  • Industry Security Notices (ISNs)
• Knowledge of UK Government security standards, including:
  • Government Security Policy Framework (SPF)
  • NCSC Cloud Security Principles
  • NCSC SaaS Security Principles
  • Cyber Essentials
  • CHECK Penetration Testing Scheme
• Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV.
• Experience conducting risk assessments using recognised methodologies such as IS1 and NIST SP 800-30.
• Strong written and verbal communication skills, with the ability to clearly justify and explain security requirements.
• Ability to build relationships with both senior stakeholders and technical teams.
• Strong organisational skills with the ability to manage multiple priorities.
• High attention to detail with a proven completer-finisher mindset.
• Competent user of Microsoft Word, Excel and PowerPoint.

Desirable

• Knowledge of ISO 27001, CMMC and the NIST Cyber Security Framework, including SP 800-53.
• Familiarity with UK nuclear security regulations and ONR Security Assessment Principles (SyAPs).