Security Assurance Lead – UK Defence & Cloud Security

AtkinsRéalis Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working culture

Training and development

Flexible holiday allowances

Competitive salaries

Job summary

AtkinsRéalis is seeking a Security Assurance Lead to oversee UK consultants delivering cloud security assurance for non-core systems and to maintain our Secure Networks framework. You will manage risk assessments, security arguments, and compliance statements against multiple standards, including Defence CYber Certification and MOD guidance.

Role requires extensive UKMOD security knowledge, stakeholder liaison, and ability to guide cross-functional teams.

Qualifications

• A 'completer finisher', with an eye for detail.
• Demonstrable experience of working in cyber security in a UK MOD-related environment.
• Strong familiarity with UK MOD security standards such as Def Stan 05-138 versions 3 and 4, the Cyber Security Model, Secure By Design, Industry Security Notices.
• Strong familiarity with UK Government security standards such as 007/SPF, NCSC Cloud Security Principles, NCSC Principles for Using Software as a Service (SaaS) securely, Cyber Essentials, and the CHECK penetration testing scheme.
• Broad familiarity with UK Government physical and personnel security such as NPSA and UKSV.
• Risk assessment using recognised standards such as IS1 and NIST SP800-30.
• Able to express yourself effectively, with a high degree of clarity, in English, especially when justifying and explaining required security measures.
• Able to liaise effectively with a wide range of stakeholders, from senior leaders to technical IT staff.
• Able to prioritise and manage your time to achieve multiple different tasks.
• (Desirable) Familiarity with broader international security standards such as ISO27001, CMMC, and the NIST Cyber Security Framework (especially SP800-30 and SP800-53).
• (Desirable) Familiarity with UK nuclear regulations such as the ONR SyAPs.
• (Desirable) Familiarity with the AtkinsRéalis corporate security standards and approaches.
• Competent with Microsoft Word, Excel and PowerPoint.

Responsibilities

• Oversee and guide a team of consultants from the UK business who are fulfilling our cloud security assurance process for non-core cloud systems.
• Maintain and implement our overall Secure Networks Security Assurance framework, including creation of protocols and processes as required.
• Maintain our secure network approvals including risk assessments, security arguments, and compliance statements against the DCPP Cyber Security Model (plus against other standards and control sets as required).
• Carry out and maintain security assessments for core Secure Networks cloud systems such as Microsoft 365.
• Oversee Secure Networks elements of broader company certification to the Defence Cyber Certification.
• Carry out compliance audits to ensure that the Secure Networks Team, local security contacts, and project teams are carrying out required assurance activities, both in our secure networks and for cloud systems.
• Stay up to date with MOD and other regulatory guidance, and relevant commercial standards such as Microsoft 365 guidance, and incorporate the results into our Secure Networks security assurance approaches.
• Provide security assurance guidance to the Secure Networks Team to review and influence the design and operation of our secure networks.

Skills

Completer finisher

Cyber security

MOD standards

Security governance

Stakeholder liaison

English fluency

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

AtkinsRéalis is seeking a Security Assurance Lead to oversee UK consultants delivering cloud security assurance for non-core systems and to maintain our Secure Networks framework. You will manage risk assessments, security arguments, and compliance statements against multiple standards, including Defence CYber Certification and MOD guidance.

Role requires extensive UKMOD security knowledge, stakeholder liaison, and ability to guide cross-functional teams.