Security Assurance Coordinator - SC Cleared

CBSbutler Holdings Limited; Corsham; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

CBSbutler is seeking an experienced Security Assurance Coordinator to support a MOD OpNET programme. You will lead governance, risk management and compliance across environments, ensuring Secure by Design and JSP 440/604 alignment.

The role involves coordinating assurance activities with project teams and security functions. You will manage security risks, prepare evidence of compliance and drive security controls across physical, procedural and technical domains, while liaising with

Qualifications

• Proven experience in security assurance, information assurance and cyber security governance.
• Experience managing security risk and implementation of controls using recognized frameworks.
• Knowledge of MOD security policies JSP 440 and JSP 604.
• Experience coordinating risk assessments and remediation activities.
• Familiarity with NIST methodologies and security control development.

Responsibilities

• Provide security assurance advice in line with MOD Secure by Design principles.
• Conduct security risk assessments and manage remediation actions.
• Develop assurance evidence, SyOPs and awareness briefings.
• Implement and monitor security controls (physical, personnel, technical).
• Coordinate third‑party checks and penetration testing activities.
• Review designs and documentation for security compliance.
• Identify cyber threats and advise mitigations.
• Integrate security controls with MOD/OpNET security operations.

Skills

Security assurance

Information assurance

Cyber security governance

Security risk management

JSP 440

JSP 604

NIST frameworks

Job description

Security Assurance Coordinator

+ Long term contract

+ SC Clearance required

+ up to £600 per day - Inside IR35

+ Hybrid from Corsham

The Role

An opportunity for an experienced Security Assurance Coordinator to support the programme, delivering security governance, risk management and compliance across MOD OpNET environments.

You will ensure systems meet MOD security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control implementation in line with JSP 440, JSP 604 and NIST methodologies.

Working closely with project teams, security architects, engineers and wider Defence security functions, you will coordinate assurance activities, manage security risks and produce the evidence required to demonstrate compliance.

Key Responsibilities

• Provide security assurance advice and guidance in line with MOD Secure by Design principles and JSP 440.
• Conduct security risk assessments using NIST 800 methodologies and manage associated mitigation actions.
• Develop security documentation, assurance evidence, security operating procedures (SyOPs) and awareness briefings.
• Implement and monitor physical, procedural, personnel and technical security controls.
• Coordinate third-party CHECK IT health checks, penetration testing and vulnerability assessments, including remediation activities.
• Review high-level and low-level designs (HLDs/LLDs), technical documentation and work instructions for security compliance.
• Identify emerging cyber threats, assess business and technical risks, and recommend appropriate mitigations.
• Integrate programme security controls with wider MOD, NSoIT(D) and OpNET security operations and strategic security solutions.
• Organise and chair project Security Working Groups.
• Support the Security Architect and Security Engineer in ensuring solutions meet Secure by Design and risk tolerance requirements.
• Balance operational and business requirements with information assurance and cyber security obligations.
• Coordinate assurance activities with the OpNET Black/Red Security Assurance Coordinator and existing security governance teams.

Essential Skills & Experience

• Proven experience in security assurance, information assurance, cyber security governance or security risk management.
• Knowledge of MOD security policies, particularly JSP 440 and JSP 604.
• Experience conducting security risk assessments and managing security controls using NIST frameworks.
• Understanding of Secure by Design principles and MOD assurance and compliance processes.
• Experience coordinating penetration testing, vulnerability assessments and remediation activities.
• Ability to assess technical designs and supporting documentation for security compliance.
• Strong stakeholder management, communication and technical documentation skills.
• Experience working within complex Defence or secure government environments.

Desirable Experience

• Experience supporting OpNET, NSoIT(D) or MOD Defence Digital programmes.
• Familiarity with Network Operating Authority (NOA) requirements and cyber defence assurance.
• Experience working with security architects, engineers and operational security teams.
• Knowledge of security operations, third-party assurance and risk governance processes.

This is an opportunity to play a key role in delivering security assurance and risk management across a critical MOD programme, ensuring compliance with Defence security standards and supporting the secure delivery of operational capabilities.