Senior Information Assurance & Risk Specialist

DataCareers; Liverpool; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading technology firm in the UK is seeking a Senior Information Assurance & Risk Specialist to help shape secure digital services in a complex environment. The role involves assessing security controls, guiding secure decisions, and mentoring colleagues. Candidates should possess a strong technical background in security, knowledge of NIST, and experience in regulated environments. The position offers hybrid working arrangements and a comprehensive benefits package, including 30 days of annual leave and development opportunities.

Benefits

30 days annual leave plus bank holidays

Hybrid and flexible working arrangements

Career development pathways

Wellbeing support services

Lifestyle and discount schemes

Local Government Pension Scheme

Qualifications

• Strong technical security background necessary.
• Experience in risk assessment and security controls required.
• Must have ability to coach and clearly communicate.

Responsibilities

• Lead technical assessments and produce assurance evidence.
• Guide secure-by-design decisions across technologies.
• Mentor colleagues and support information assurance function.

Skills

Technical security background (cloud, MS stack, architecture, modern tech risks)

Applied IA experience: NIST, security controls, risk assessment

Ability to coach and communicate with non-technical stakeholders

Experience in a regulated environment

Collaborative and proactive approach

Advocacy for high standards of information assurance

Education

Relevant professional qualifications (e.g. CISSP, CISMP, Information Security certifications)

Job description

Oxford or Hampshire | Hybrid

Circa £65,365 per annum + benefits

Permanent | Full time (flexible)

We're looking for a highly skilled Senior Information Assurance & Risk Specialist to help shape secure, modern digital services in a complex highly secure environment. This is a senior technical role where you'll lead through expertise, coaching and collaboration-not line management.

You’ll apply your strong technical background to assess security controls, guide secure‑by‑design decisions and support the organisation in managing risk across both established and emerging technologies. From cloud and Microsoft platforms to AI, LLMs and facial recognition , you'll bring clarity, rigour and practical insight to ensure decisions are safe, proportionate and evidence‑based.

You’ll lead SyAP assessments , produce high‑quality assurance evidence and help align policies and standards with national expectations. You'll also uplift colleagues through mentoring, translating complex concepts into plain language and supporting a maturing IA function.

What you’ll bring

• Strong technical security background (cloud, MS stack, architecture, modern tech risks)
• Applied IA experience : NIST, security controls, risk assessment
• Ability to coach others and communicate clearly with non‑technical stakeholders
• Experience in a regulated environment (policing, HMG, MoD or similar)
• Collaborative, proactive approach with high integrity
• Act as a visible advocate for high standards of information assurance.

Relevant professional qualifications (e.g. CISSP, CISMP, Information Security certifications) are also preferred. A full UK driving licence is essential due to travel and operational flexibility requirements.

The Package

• 30 days annual leave plus bank holidays
• Hybrid and flexible working arrangements
• Career development pathways and continuous professional learning
• A wide range of wellbeing support services and staff networks
• Lifestyle and discount schemes
• Local Government Pension Scheme

Vetting and eligibility

All roles require government level vetting. This includes checks on identity, criminal records, financial history and relevant associations. You will need five years of continuous UK residency to enable the necessary background checks to be completed.

If you're motivated by purposeful work and want to influence how emerging technologies are secured, we'd love to hear from you.