Senior Cyber GRC Engineer – Risk & Compliance

Leidos; Brampton; On-site; GBP 62,000 - 79,000; Full time

Benefits offered by this job

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave

Flexible benefits

Flexi-Time

Job summary

Leidos UK in Huntingdon seeks a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to join our growing Cyber Security team. You will lead information assurance across UK programmes, shaping risk-based security strategies and embedding security throughout the project lifecycle.

DV clearance is required, and the role is onsite in Huntingdon with occasional UK travel. You will work with customers, suppliers, and delivery teams to raise cyber security standards and ensure compliance

Qualifications

• Proven experience delivering information assurance, risk management and security assurance in regulated environments.
• Strong knowledge of NIST RMF/CSF, ISO 27001 and government security frameworks; able to produce assurance artefacts.
• Experience leading assurance initiatives, audits, control assessments and vulnerability management using Nessus/Trivy/Tenable.
• Ability to brief senior stakeholders, mentor assurance practitioners and drive continuous improvement of security processes.

Responsibilities

• Lead Information Assurance across the system lifecycle, ensuring requirements are understood and maintained.
• Conduct risk assessments using recognised frameworks (NIST RMF/CSF, ISO 27001).
• Develop, review and maintain assurance artefacts (SyOPs, RMADs, Security Impact Assessments).
• Drive maturity of assurance processes, tooling, reporting and governance across programmes.
• Lead incident response capability development, including playbooks and exercises.
• Manage vulnerability, risk, audit and compliance activities to resolution.
• Engage customers and suppliers with clear risk-based advice and reporting.
• Provide leadership and guidance to assurance practitioners and project teams.

Skills

NIST RMF/CSF

ISO 27001

Risk Management

Security Assurance

Stakeholder Briefing

Mentoring

Security Governance

Tools

Nessus

Trivy

Tenable

Job description

Leidos UK in Huntingdon seeks a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to join our growing Cyber Security team. You will lead information assurance across UK programmes, shaping risk-based security strategies and embedding security throughout the project lifecycle.

DV clearance is required, and the role is onsite in Huntingdon with occasional UK travel. You will work with customers, suppliers, and delivery teams to raise cyber security standards and ensure compliance