Security Assurance Analyst: SbD & AGAP Backlog Lead

Digi2al Limited; Portsmouth; On-site; GBP 84,000 - 110,000; Full time

Job summary

Digi2al Limited in Portsmouth seeks a proactive Security Analyst to join the DNA team. Your core focus is clearing the backlog of AGAP assessments under the Security by Design framework for TLSE and Live Services, acting as the bridge across technical functions to collect, verify and consolidate security data.

You’ll document architectures, data flows and hosting models, identify gaps and risks, and provide remediation recommendations.

Qualifications

• 3+ years in information security, application security, cybersecurity compliance, or IT risk management within a software development or SaaS environment.
• Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST).
• Familiarity with SDLC, cloud hosting platforms (AWS, Azure, or GCP), and production service operations.
• Excellent stakeholder engagement skills with the ability to translate technical conversations into structured security documentation.
• Methodical mindset with attention to detail, able to dissect complex software ecosystems and identify governance gaps.
• Experience of MOD Secure by Design.
• Cyber assurance and risk management.
• Analysis of technical and security documentation.
• Stakeholder engagement and evidence gathering.
• Production of assurance artefacts and supporting documentation.

Responsibilities

• Systematically review, prioritise, and clear the backlog of AGAP assessments across TLSE-owned software products.
• Collaborate with TLSE, Live Services, Hosting Services, the Tech Office, and Software Developers to extract, verify, and consolidate security data for AGAPs.
• Identify, assess and document product architectures, data flows and hosting models, validating SbD alignment.
• Identify missing security controls, risks, assurance gaps or architectural concerns and provide remediation recommendations.
• Maintain audit-ready AGAP documentation within central security repositories and track remediation actions.
• Gather insights to provide feedback to the Tech Office on SbD workflows and AGAP templates.
• Conduct application assurance reviews.
• Analyse existing assurance documentation and evidence.
• Identify gaps against Secure by Design requirements.
• Work with Service Owners, Product Teams and SMEs to capture documentation where incomplete.
• Gather, analyse and organise evidence required to support AGAP completion and assurance activities.
• Maintain assurance repositories, track remediation actions and support governance and audit activities.
• Document findings, risks and remediation activities.
• Support tracking and reporting of assurance status across the portfolio.

Skills

Information security

Application security

Cybersecurity compliance

IT risk management

Threat modelling

Security by Design

Cloud security basics

Stakeholder engagement

Documentation

Audit readiness

Tools

Jira

Confluence

GRC tools

Job description

Digi2al Limited in Portsmouth seeks a proactive Security Analyst to join the DNA team. Your core focus is clearing the backlog of AGAP assessments under the Security by Design framework for TLSE and Live Services, acting as the bridge across technical functions to collect, verify and consolidate security data.

You’ll document architectures, data flows and hosting models, identify gaps and risks, and provide remediation recommendations.