Security Assurance Coordinator - SC Cleared

CBSbutler Holdings Limited trading as CBSbutler; Corsham; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

CBSbutler is seeking a Security Assurance Coordinator to support the MOD OpNET programme. The role covers governance, risk management and compliance across environments, ensuring Secure by Design principles are applied in line with JSP 440, JSP 604 and NIST methodologies.

You will coordinate assurance activities, manage security risks and produce evidence to demonstrate compliance, working with project teams, security architects and engineers in a Defence environment.

Qualifications

• Proven experience in security assurance and risk management.
• Knowledge of MOD security policies (JSP 440/604).
• Experience with NIST frameworks for risk assessments.
• Ability to coordinate penetration testing and remediation.
• Experience in secure government environments.

Responsibilities

• Provide security assurance advice in line with MOD Secure by Design principles and JSP 440.
• Conduct security risk assessments using NIST methodologies and manage mitigations.
• Develop security documentation, assurance evidence, SyOPs and awareness briefings.
• Implement and monitor physical, procedural, personnel and technical security controls.
• Coordinate third-party CHECK IT checks, pen tests and vulnerability assessments.
• Review designs and technical docs for security compliance.
• Identify emerging cyber threats and recommend mitigations.
• Integrate programme security controls with wider MOD and OpNET security operations.
• Organise and chair project Security Working Groups.
• Support Security Architect/Engineer to ensure Secure by Design compliance.
• Balance operational/business needs with information assurance and cyber obligations.
• Coordinate assurance with other security governance teams.

Skills

Security assurance

Information assurance

Cyber security governance

Security risk management

NIST frameworks

Secure by Design

MOD JSP 440/604

Security documentation

Stakeholder management

Communication skills

Job description

• Long term contract
• SC Clearance required
• up to £600 per day - Inside IR35
• Hybrid from Corsham

The Role

An opportunity for an experienced Security Assurance Coordinator to support the programme, delivering security governance, risk management and compliance across MOD OpNET environments.

You will ensure systems meet MOD security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control implementation in line with JSP 440, JSP 604 and NIST methodologies.

Working closely with project teams, security architects, engineers and wider Defence security functions, you will coordinate assurance activities, manage security risks and produce the evidence required to demonstrate compliance.

Key Responsibilities

• Provide security assurance advice and guidance in line with MOD Secure by Design principles and JSP 440.
• Conduct security risk assessments using NIST 800 methodologies and manage associated mitigation actions.
• Develop security documentation, assurance evidence, security operating procedures (SyOPs) and awareness briefings.
• Implement and monitor physical, procedural, personnel and technical security controls.
• Coordinate third-party CHECK IT health checks, penetration testing and vulnerability assessments, including remediation activities.
• Review high-level and low-level designs (HLDs/LLDs), technical documentation and work instructions for security compliance.
• Identify emerging cyber threats, assess business and technical risks, and recommend appropriate mitigations.
• Integrate programme security controls with wider MOD, NSoIT(D) and OpNET security operations and strategic security solutions.
• Organise and chair project Security Working Groups.
• Support the Security Architect and Security Engineer in ensuring solutions meet Secure by Design and risk tolerance requirements.
• Balance operational and business requirements with information assurance and cyber security obligations.
• Coordinate assurance activities with the OpNET Black/Red Security Assurance Coordinator and existing security governance teams.

Essential Skills & Experience

• Proven experience in security assurance, information assurance, cyber security governance or security risk management.
• Knowledge of MOD security policies, particularly JSP 440 and JSP 604.
• Experience conducting security risk assessments and managing security controls using NIST frameworks.
• Understanding of Secure by Design principles and MOD assurance and compliance processes.
• Experience coordinating penetration testing, vulnerability assessments and remediation activities.
• Ability to assess technical designs and supporting documentation for security compliance.
• Strong stakeholder management, communication and technical documentation skills.
• Experience working within complex Defence or secure government environments.

Desirable Experience

• Experience supporting OpNET, NSoIT(D) or MOD Defence Digital programmes.
• Familiarity with Network Operating Authority (NOA) requirements and cyber defence assurance.
• Experience working with security architects, engineers and operational security teams.
• Knowledge of security operations, third-party assurance and risk governance processes.

This is an opportunity to play a key role in delivering security assurance and risk management across a critical MOD programme, ensuring compliance with Defence security standards and supporting the secure delivery of operational capabilities