Security Assurance Lead – Secure by design

Forwardrole; Bristol; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

Une entreprise dynamique recherche un Security Assurance Lead pour intégrer des principes de sécurité dans les systèmes de défense. Ce rôle implique la collaboration avec des équipes multidisciplinaires pour assurer la conformité et la résilience des systèmes, tout en fournissant une expertise en matière de sécurité à l'ensemble des projets.

Qualifications

• Expérience prouvée dans le domaine de la sécurité des systèmes complexes et critiques.
• Compétences solides en ingénierie logicielle, livraison d'infrastructure et architecture de systèmes sécurisés.
• Compréhension approfondie des méthodologies Secure by Design appliquées à la conception de systèmes.

Responsibilities

• Intégrer les principes Secure by Design à chaque étape des cycles de vie des produits.
• Effectuer des évaluations de risques de sécurité et générer des rapports.
• Diriger des initiatives d'amélioration continue pour identifier les vulnérabilités.

Skills

Risk Management

Analytical Skills

Cloud Security

Secure System Architecture

Software Engineering

Collaboration

Communication

Job description

Security Assurance Lead – Secure by design

Salary - £75,000 - £95,000 + excellent benefits

Location: Bristol (UK) Hybrid working options available

Clearance – MOD DV

About the Role:

This pivotal role focuses on designing and assuring secure, software-centric systems that handle classified information within the UK Ministry of Defence environment. You will leverage your expertise in cloud computing, software development, and networking to promote and implement Secure by Design principles across all phases of product development and deployment.

You will serve as a trusted security advisor to project teams, providing guidance, assurance, and challenge where necessary to ensure our systems are resilient, compliant, and prepared for evolving security threats.

Key Responsibilities:

• Integrate Secure by Design principles into every stage of product and system lifecycles, from initial concept through to decommissioning.
• Conduct regular security risk assessments and generate reports on the organisational security posture.
• Lead continuous improvement initiatives to identify vulnerabilities, assess threats, escalate critical issues, and facilitate effective resolution strategies.
• Collaborate with multidisciplinary teams, embedding security into development processes and ensuring security considerations are prioritized at all stages.
• Provide expert guidance to engineering and IT teams on current security best practices and emerging threats.
• Oversee the assurance, testing, and validation of security controls to guarantee compliance and system resilience.

Required Skills/Experience:

• Demonstrable expertise in securing and assuring complex, mission-critical systems.
• Proven experience in software engineering, infrastructure delivery, and secure system architecture.
• Deep understanding of Secure by Design methodologies and their application in system and network design.
• Strong knowledge of securing cloud environments, software applications, and networked systems.
• Strong analytical skills with a focus on risk management and continuous security improvement.
• Able to collaborate effectively with cross-disciplinary teams to develop compliant, secure solutions.
• Excellent communicator capable of translating complex technical security concepts for a wide range of stakeholders.