Security Assurance Engineer

Pearson Whiffin Recruitment Ltd; Greater London; On-site; GBP 65,000 - 85,000; Full time

Job summary

A recruitment company is seeking a Security Assurance Engineer to deliver a comprehensive security posture assessment. The role involves translating technical outputs into coherent reports, assessing both technical and non-technical aspects of security, and ensuring integration of security assurance across all stages of service delivery. Candidates must possess active SC clearance, strong documentation skills, and the ability to interpret various security inputs. This position provides an opportunity to contribute to security in a complex environment.

Qualifications

• SC Clearance is essential, active within the last 12 months.
• Experience producing structured security assurance documentation.
• Ability to interpret diverse security inputs into assurance narratives.

Responsibilities

• Assess the overall security posture of the service.
• Review and analyze security artefacts and test results.
• Engage with stakeholders to integrate security assurance.

Skills

SC Clearance

Security assurance documentation

Interpret diverse security inputs

Excellent written communication

Holistic security management

Job description

Security Engineer – Assurance/Report Writing

We’re looking for a Security Assurance Engineer with the ability to see the whole security picture—technology, people, and process. You’ll join a team of experienced cyber specialists, but your role is to step back from the individual technical outputs and assess what they mean for the overall security posture of the service.

Review and analyse security artefacts, test results, assessments, and technical outputs from the cyber teams. Translate that information into clear, evidence-based Security Assurance Reports. Develop, maintain, and communicate security arguments that demonstrate how risks are mitigated and how the service meets required security outcomes. Look beyond technical controls and assess people, process, and governance aspects that contribute to end‑to‑end security. Provide a holistic view of how all elements—technical and non‑technical—impact the security of implemented services. Engage with stakeholders across engineering, delivery, and governance to ensure security assurance is understood and integrated.

Required Skill and Experience

• SC Clearance is essential and must have been active within the last 12 months.
• Experience producing structured security assurance documentation, security cases, or security arguments (e.g., using GSN, safety/security case approaches, or similar).
• The ability to interpret diverse security inputs—pen test results, architectural designs, risk assessments, compliance outputs—and turn them into coherent assurance narratives.
• A strong understanding of how organisational processes, behaviours, and controls influence security.
• Excellent written communication skills, with the ability to present complex security information clearly and persuasively.
• Experience in large or complex projects where security needed to be managed holistically (not just at a technical-control level).
• Knowledge of relevant security standards or frameworks (e.g., NCSC, ISO 27001, NIST, etc.) is a plus.