Security Delivery Lead

Sanderson Government & Defence; High Wycombe; On-site; GBP 65,000 - 92,000; Full time

Job summary

Sanderson Government & Defence seeks a Delivery Team Security Lead (DTSL) in High Wycombe to support a large-scale military digital transformation programme. This role combines hands-on security delivery with governance, risk and accreditation activities across the software development lifecycle.

The successful candidate will act as security lead for multiple projects, collaborating with engineering, delivery managers and assurance stakeholders to embed Secure by Design, maintain live security

Qualifications

• Experience in cyber security and governance across the SDLC.
• Familiar with SSDLC, risk management and assurance artefacts.
• Experience in Agile or DevSecOps environments.
• Strong written and verbal communication with stakeholders.

Responsibilities

• Secure by Design guidance across Agile delivery teams.
• Maintain security risk registers and remediation tracking.
• Operate as security lead for projects within TLS environment.
• Contribute to HLDs, TLMPs and data through-life plans.

Skills

Cyber Security

Information Security

Security Assurance

Governance

Risk Management

SSDLC

Agile/DevSecOps

Stakeholder comms

Documentation

Education

CompTIA Security+

ISC2 Certified in Cybersecurity (CC)

SSCP

CISSP Associate

SABSA Foundation

Equivalent security certifications

Job description

Delivery Team Security Lead (DTSL)

Location: High Wycombe
Security Clearance: SC Clearance Required
Contract: 6-Month Rolling Contract
Rate: £350 - £500 per day (Inside IR35)

About the Role

We are seeking a Junior Security Architect / Delivery Team Security Lead (DTSL) to support a large-scale military digital transformation programme.

This is an exciting opportunity for an ambitious cyber security professional looking to progress into Security Architecture while gaining hands-on experience across secure software delivery, risk management, security assurance, governance, and Defence accreditation activities.

Working within a Through Life Support (TLS) environment, you will be responsible for maintaining the security posture of a portfolio of live operational applications. Acting as the security lead for assigned projects, you will work closely with engineering teams, delivery managers, architects, and assurance stakeholders to ensure that security is embedded throughout the software development lifecycle.

Key ResponsibilitiesSecure by Design

• Support the implementation of Secure by Design principles across Agile delivery teams.
• Ensure products maintain a live security case supported by appropriate assurance evidence.
• Promote security best practices throughout the software development lifecycle.

Security Risk Management

• Conduct and maintain security risk assessments using recognised risk management methodologies.
• Manage product-level security risk registers and track remediation activities.
• Assess vulnerabilities and support teams in reducing risk exposure.
• Escalate security risks that exceed agreed tolerance levels.

Security Architecture & Assurance

• Collaborate with engineering teams and technical stakeholders to integrate security requirements into solution designs.
• Contribute to the development and review of:
  • High-Level Designs (HLDs)
  • Through-Life Management Plans (TLMPs)
  • Data Through-Life Management Plans (D-TLMPs)
• Provide pragmatic security guidance to support secure delivery outcomes.

Compliance & Governance

• Support compliance with Defence security policies, standards, and governance requirements.
• Develop and maintain security documentation and assurance artefacts.
• Contribute to Security Management Plans (SMPs) and accreditation evidence packs.
• Assist with governance reviews and security assurance activities.

Stakeholder Engagement

• Build strong relationships with technical and non-technical stakeholders across the programme.
• Act as a trusted security advisor to delivery teams.
• Support security discussions during governance forums, delivery ceremonies, and assurance engagements.

Essential Skills & Experience

• Experience within Cyber Security, Information Security, Security Assurance, Governance, or Risk Management roles.
• Understanding of secure software development lifecycles (SSDLC).
• Knowledge of security risk management principles and methodologies.
• Experience working within Agile and/or DevSecOps environments.
• Strong written and verbal communication skills.
• Ability to work effectively with both technical and non-technical stakeholders.
• Strong organisational and workload management skills.
• Experience creating and maintaining security documentation and assurance artefacts.

Desirable Skills & Experience

• Experience within Defence, Government, or highly regulated environments.
• Knowledge of security accreditation and assurance processes.
• Familiarity with the NIST Risk Management Framework (RMF).
• Experience with vulnerability management and security tooling.
• Exposure to security architecture, secure design reviews, or threat modelling.
• Understanding of AI governance and Responsible AI principles.
• Knowledge of Government Digital Service (GDS) delivery methodologies.

Qualifications

The following certifications would be advantageous:

• CompTIA Security+
• ISC2 Certified in Cybersecurity (CC)
• SSCP
• CISSP Associate
• SABSA Foundation
• Equivalent industry-recognised security certifications

Reasonable Adjustments:

Respect and equality are core values to us.

We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives.

Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.