Security Assurance Adviser

Experis Austria; Greater London; Hybrid; GBP 111,000 - 129,000; Full time

Job summary

ManpowerGroup is recruiting a Security Assurance Advisor to support governance, risk and compliance across secure networks and cloud environments in a defence-related setting. The role is Hybrid with multiple UK locations including London, Epsom, Birmingham, and Manchester.

Responsibilities include maintaining accreditations, performing risk assessments, and ensuring alignment with MOD security standards for cloud platforms such as Microsoft 365.

Qualifications

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards (Def Stan 05-138, CSM, Secure by Design, ISNs).
• Knowledge of UK Government security standards (SPF, NCSC Cloud Security Principles, Cyber Essentials).
• Experience with risk assessment methodologies such as IS1 and NIST SP 800-30.

Responsibilities

• Support the implementation and continual improvement of secure network security assurance frameworks, processes and procedures.
• Maintain secure network accreditations and approvals, including risk assessments and security cases.
• Conduct security assessments of core cloud platforms, including Microsoft 365.
• Support compliance with Defence Cyber Certification requirements.
• Engage with MOD representatives and other stakeholders to ensure timely assurance activities.

Skills

GRC background

Cyber security

Stakeholder management

Communication

Risk assessment

Tools

Microsoft Word

Excel

PowerPoint

Job description

Role: Security Assurance Advisor

Location: London / Epsom / Birmingham / Manchester - Any location (Hybrid)

Duration: 12 Months

Day rate: £600 - £700 Inside IR35

We are seeking an experienced Security Assurance Consultant with a strong Governance, Risk & Compliance (GRC) background to support the security assurance and accreditation of secure networks and cloud environments within a UK defence-related setting.

This role will focus on maintaining security approvals, conducting risk assessments, supporting compliance activities, and ensuring alignment with MOD and wider government security standards.

Key Responsibilities

• Support the implementation and continual improvement of secure network security assurance frameworks, processes and procedures.
• Maintain secure network accreditations and approvals, including risk assessments, security cases, compliance statements and supporting evidence.
• Conduct security assessments of core cloud platforms, including Microsoft 365.
• Support compliance with Defence Cyber Certification (DCC) requirements.
• Participate in cloud security assurance activities for both core and non-core cloud systems.
• Conduct compliance audits to ensure assurance activities are being completed across secure networks and cloud services.
• Monitor changes to MOD, government and industry security standards, incorporating requirements into assurance processes.
• Provide security assurance guidance to influence the design, operation and ongoing management of secure environments.
• Maintain and periodically review security risk assessments, communicating findings and tracking remediation activities.
• Monitor emerging cyber threats and assess their impact on secure networks.
• Track and report progress against security action plans.
• Engage with internal and external stakeholders, including security teams, project teams, HR vetting, procurement functions and MOD representatives.
• Support security operating procedure updates and annual reviews.
• Assist with external audits, including ISO 27001 and client-led assessments.
• Oversee the security approval and ongoing assurance of third parties connecting to or handling information from secure networks.
• Assess specialist devices requiring connection to secure networks.
• Maintain a coordinated assurance programme to ensure activities are delivered on time.
• Provide reporting support and assurance metrics as required.

Essential Skills & Experience

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards, including:
  • Def Stan 05-138 (v3 & v4)
  • Cyber Security Model (CSM)
  • Secure by Design
  • Industry Security Notices (ISNs)
• Knowledge of UK Government security standards, including:
  • Government Security Policy Framework (SPF)
  • NCSC Cloud Security Principles
  • NCSC SaaS Security Principles
  • Cyber Essentials
  • CHECK Penetration Testing Scheme
• Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV.
• Experience conducting risk assessments using recognised methodologies such as IS1 and NIST SP 800-30.
• Strong written and verbal communication skills, with the ability to clearly justify and explain security requirements.
• Ability to build relationships with both senior stakeholders and technical teams.
• Strong organisational skills with the ability to manage multiple priorities.
• High attention to detail with a proven completer-finisher mindset.
• Competent user of Microsoft Word, Excel and PowerPoint.

Desirable

• Knowledge of ISO 2701, CMMC and the NIST Cyber Security Framework, including SP 800-53.
• Familiarity with UK nuclear security regulations and ONR Security Assessment Principles (SyAPs).

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.