Senior GRC Engineer – Cyber Security & Risk Assurance

Leidos; Huntingdon; On-site; GBP 62,000 - 79,000; Full time

Benefits offered by this job

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave

Flexible benefits

Flexi-Time

Job summary

Leidos in the United Kingdom seeks a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to lead security assurance across UK programmes. The role requires shaping assurance strategy, risk-based decision making and embedding security throughout the project lifecycle.

You will drive maturity of risk assessment methods, utilise NIST/ISO frameworks and collaborate with customers, suppliers and multidisciplinary teams to raise cyber security standards.

Qualifications

• Proven Information Assurance, risk management, and security governance experience in defence, government, or highly regulated environments.
• Strong knowledge of NIST RMF/CSF, ISO 27001 and government security frameworks with artefact development.
• Experience leading assurance initiatives, audits, control assessments, incident response, and vulnerability management.
• Ability to brief and influence senior stakeholders, mentor assurance practitioners, prioritise demands, and drive improvements across processes and tooling.

Responsibilities

• Lead Information Assurance across the system lifecycle evaluating security requirements and assurance.
• Conduct risk assessments using recognized frameworks including NIST RMF/CSF and ISO 27001.
• Develop, review and maintain artefacts like SyOPs, RMADs, Security Impact Assessments and governance docs.
• Drive maturity of assurance processes, tooling, reporting and governance across programmes.
• Lead incident response capability development including plans, playbooks, testing and tabletop exercises.
• Manage vulnerability, risk, audit, control assessment and compliance activities; drive findings to resolution.
• Engage customers and senior stakeholders with clear risk advice and evidence-based recommendations.
• Provide leadership and mentoring to assurance practitioners and project teams.

Skills

GRC governance

Risk management

NIST RMF/CSF

ISO 27001

Vulnerability management

Stakeholder briefing

Mentoring

Nessus

Tenable.io

Tools

Nessus

Tenable.io

Job description

Leidos in the United Kingdom seeks a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to lead security assurance across UK programmes. The role requires shaping assurance strategy, risk-based decision making and embedding security throughout the project lifecycle.

You will drive maturity of risk assessment methods, utilise NIST/ISO frameworks and collaborate with customers, suppliers and multidisciplinary teams to raise cyber security standards.