Senior Information Assurance Engineer: Risk & Assurance Lead

Leidos Innovations UK Limited; Cambridge; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave

Flexible Benefits

Flexi-Time

Job summary

Leidos UK is seeking a Senior Information Assurance Engineer to lead security assurance across complex UK programmes. You will shape assurance strategy, support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle.

You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects.

Qualifications

• Proven IA, risk management and security assurance experience.
• Strong understanding of NIST RMF/CSF, ISO 27001 and Gov frameworks.
• Experience developing artefacts such as SyOPs, RMADs and Security Impact Assessments.
• Experience leading assurance initiatives, audits, control assessments and incident response.

Responsibilities

• Lead Information Assurance across the system lifecycle and ensure security requirements are understood and maintained.
• Conduct risk assessments using recognised frameworks (NIST RMF/CSF, ISO 27001).
• Develop, review and maintain assurance artefacts (SyOPs, RMADs, Security Impact Assessments, Security Management Plans).
• Drive maturity of assurance processes, tooling, reporting and governance across programmes.
• Lead incident response capability development, including plans, playbooks and Tabletop Exercises.
• Engage customers and suppliers with clear risk advice and evidence-based recommendations.
• Provide leadership and mentoring to assurance practitioners and wider teams.

Skills

Information Assurance

Risk management

Stakeholder engagement

Leadership

Governance

Education

Security certifications (CISM/CISSP/CRISC) or equivalent

Tools

Nessus

Trivy

Tenable

Job description

Leidos UK is seeking a Senior Information Assurance Engineer to lead security assurance across complex UK programmes. You will shape assurance strategy, support risk-based decision making, and work with customers, suppliers, and delivery teams to embed security throughout the lifecycle.

You will drive maturity of NIST-aligned risk assessment methods, assurance processes, tooling, and reporting to improve consistency and visibility across projects.