Senior Security Assurance Lead - Defence Sector

Standard 8 Recruitment Ltd; Guildford; On-site; GBP 90,000 - 130,000; Full time

Job summary

Standard 8 Recruitment Ltd seeks an Information & Cybersecurity Assurance Manager to own security workstreams across products and programmes, ensuring requirements are evidenced and delivered through the lifecycle.

This senior role covers security assurance, design, certification, risk, testing, supplier security and incident response within a regulated environment, including involvement with CABs and executive reporting.

Qualifications

• Security assurance experience in defence or similarly secure environments.
• Experience delivering ISO 27001, CE+ or DCC controls and assessments.
• Ability to lead ITHCs, risk assessments and vulnerability management.

Responsibilities

• Provide assurance against contractual security obligations for product and service deliverables, including ISO 27001, CE+ and DCC.
• Deliver security strategies, policies, management plans, procedures and governance.
• Own cybersecurity assurance artefacts and security control requirements across schedules and milestones.
• Lead certification or contract dependent ITHCs, vulnerability management exercises and external penetration testing.
• Review designs against Secure by Design and perform risk assessments for new technologies.
• Participate in CAB meetings to provide security assurance.
• Support incident and business continuity response plans and incident response team activities.
• Contribute to security working groups and executive reporting.
• Own Security Aspect Letters and manage third-party supplier security compliance.
• Own security aspects of space licensing throughout the spacecraft lifecycle.

Skills

Cybersecurity knowledge

Risk management

Stakeholder influence

Education

ChCSP

CISM

CISA

BCS CISMP

CMIRM

Job description

Standard 8 Recruitment Ltd seeks an Information & Cybersecurity Assurance Manager to own security workstreams across products and programmes, ensuring requirements are evidenced and delivered through the lifecycle.

This senior role covers security assurance, design, certification, risk, testing, supplier security and incident response within a regulated environment, including involvement with CABs and executive reporting.