DV Cleared Cyber GRC Consultant - Secure by Design

Sanderson Government & Defence; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant (DV Cleared) for remote/hybrid work with on-site presence as required. You will deliver Secure by Design risk and security assurance services in MOD/public sector environments, collaborating with multi-disciplinary teams to align security with business risk and transformation goals.

You will lead risk management frameworks, ISMS and enterprise security risk management, and produce clear reports on vulnerabilities and

Qualifications

• DV clearance is required or active
• Experience in MOD/Public Sector cybersecurity
• Knowledge of security controls and frameworks
• Experience implementing secure by design in SDLC

Responsibilities

• Deliver Secure by Design risk and security assurance functions within MOD/Public Sector.
• Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management.
• Facilitate security and risk workshops with Authority departments.
• Produce clear reporting on vulnerabilities, risks, controls, and treatment activities.
• Provide pragmatic remediation and risk management guidance.
• Support secure design across technology platforms including cloud infrastructures.
• Contribute to blogs and research within the business community.

Skills

DV clearance

Public Sector experience

Cybersecurity

Threat modelling

Secure by Design

Risk management

Cloud security

ISO 27001

Tools

JSP440

JSP604/453

JSP490

Cloud security posture management

Key Management Systems

Job description

Sanderson Government & Defence is seeking a Cyber Security GRC Consultant (DV Cleared) for remote/hybrid work with on-site presence as required. You will deliver Secure by Design risk and security assurance services in MOD/public sector environments, collaborating with multi-disciplinary teams to align security with business risk and transformation goals.

You will lead risk management frameworks, ISMS and enterprise security risk management, and produce clear reports on vulnerabilities and