Security by Design IT Assurance Lead

ARM LIMITED; Reading; On-site; GBP 70,000 - 100,000; Full time

Job summary

ARM LIMITED is seeking a senior security assurance professional in Reading to safeguard applications, infrastructure and cloud environments. You will drive Security by Design practices, embed secure development guidelines, and coordinate across development and operations to mitigate vulnerabilities.

The role emphasizes risk management, cross-functional leadership, and ongoing assurance across the full development lifecycle, with a focus on complex defence-like IT settings and external standards

Qualifications

• IT assurance knowledge, ideally with Defence IT or complex industries
• Strong understanding of IT assurance frameworks and standards (ISO 44001, NIST 800-53, NIS2)
• Excellent communicator with collaboration across multiple functions

Responsibilities

• Own security by design and compliance across applications, infrastructure and cloud throughout the lifecycle.
• Define secure development guidelines and ensure controls in production and development.
• Monitor and assure infrastructure and cloud security through ongoing standards adherence.
• Oversee risk management and recommend improvements to systems and processes.
• Lead cross-functional teams to deliver secure solutions aligned with programme goals.
• Drive continuous security improvements and assurance initiatives across the programme.
• Support deep IT assurance knowledge and practical application across environments.
• Engage with development, operations and programme teams to mitigate vulnerabilities and incidents.

Job description

ARM LIMITED is seeking a senior security assurance professional in Reading to safeguard applications, infrastructure and cloud environments. You will drive Security by Design practices, embed secure development guidelines, and coordinate across development and operations to mitigate vulnerabilities.

The role emphasizes risk management, cross-functional leadership, and ongoing assurance across the full development lifecycle, with a focus on complex defence-like IT settings and external standards