Security & Information Risk Advisor

Sanderson Government & Defence; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading security consulting firm is seeking a Security & Information Risk Advisor (SIRA) to support high-impact programs in a sensitive UK environment. The successful candidate will assess and manage information and cyber risks, ensuring compliance with government standards and embedding security principles across digital services. Applicants should have experience in information security and be able to communicate risk effectively. The position is hybrid, and active SC clearance is required.

Qualifications

• Experience in information security, risk management, or assurance.
• Strong understanding of NCSC guidance, ISO 27001, and government security classifications.
• Ability to communicate risk clearly to technical and non-technical audiences.

Responsibilities

• Assess and advise on information and cyber security risks.
• Support accreditation and assurance activities.
• Embed secure-by-design principles across digital services.
• Ensure compliance with government security standards.
• Work with technical and operational teams to manage risk throughout the lifecycle.
• Review supplier and third-party security controls.

Skills

Information security

Risk management

Assurance

Communication

Job description

Role: Security & Information Risk Advisor (SIRA)

Location: London (hybrid)

Rate: £500-550 p/d

Duration: Initial 6 month work package

Start: January 2026

Active SC clearance is required.

We're looking for an experienced Security & Information Risk Advisor to support secure, high‑impact programmes within a sensitive UK environment. You'll help identify, assess, and manage information and cyber risks, ensuring systems and services remain secure, compliant, and resilient.

Key Responsibilities

• Assess and advise on information and cyber security risks
• Support accreditation and assurance activities
• Embed secure‑by‑design principles across digital services
• Ensure compliance with government security standards
• Work with technical and operational teams to manage risk throughout the lifecycle
• Review supplier and third‑party security controls

What You'll Bring

• Experience in information security, risk management, or assurance
• Strong understanding of NCSC guidance, ISO 27001, and government security classifications
• Ability to communicate risk clearly to technical and non‑technical audiences

If you're ready to apply your security expertise in a high‑trust, high‑impact environment, we'd love to hear from you. For more details, reach out to: [e-mail]

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.