Security Assurance Lead: Secure-by-Design & Risk Advisor

Spencer Rose Ltd; Rowberrow; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

Spencer Rose Ltd. seeks an experienced Security Assurance Lead to act as the primary security partner for the wider regulated business. Bristol on-site focus with three days on site per week; c.£80,000 salary.

You will embed security across delivery life cycles, guiding risk-based decisions and secure-by-design principles. You will collaborate with delivery teams, architects, engineers and stakeholders, conducting reviews, threat modelling, and coordinating assurance activities to strengthen

Qualifications

• Experience in Cyber Security, Security Consulting, Application Security or Security Engineering.
• Threat modelling experience including STRIDE and Data Flow Diagrams (DFDs).
• Security assurance, architecture review and risk assessment experience.
• Experience coordinating penetration testing and vulnerability remediation.
• Knowledge of Secure by Design principles.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience with AWS and Azure cloud environments.
• Understanding of CI/CD pipelines and secure software development practices.
• Excellent communication and stakeholder management skills.

Responsibilities

• Act as the lead Information Security contact for change and transformation projects and programmes.
• Provide practical security consultancy to delivery teams and stakeholders.
• Facilitate threat modelling workshops and conduct security risk assessments.
• Perform security assurance activities, including architecture, design and configuration reviews.
• Coordinate penetration testing and support remediation of identified vulnerabilities.
• Advise on application, cloud and platform security across AWS and Azure environments.
• Support and improve the Information Security Front Door engagement process.
• Work with specialist teams across Security Operations, Cloud Security, Identity and IT Continuity.
• Promote secure engineering practices and contribute to the development of security standards and processes.

Skills

Cyber Security

Security Consulting

Application Security

Security Engineering

Threat modelling

DFDs

ISO 27001

NIST

AWS

Azure

CI/CD pipelines

Secure by Design

Job description

Spencer Rose Ltd. seeks an experienced Security Assurance Lead to act as the primary security partner for the wider regulated business. Bristol on-site focus with three days on site per week; c.£80,000 salary.

You will embed security across delivery life cycles, guiding risk-based decisions and secure-by-design principles. You will collaborate with delivery teams, architects, engineers and stakeholders, conducting reviews, threat modelling, and coordinating assurance activities to strengthen