Security Assurance Adviser

Salary: £? - ? per year

Requirements:

• Proven cyber security experience within a UK MOD or defence-related environment.
• Strong understanding of governance, risk management and compliance principles.
• Familiarity with UK MOD security standards, including Def Stan 05-138 (v3 & v4), Cyber Security Model (CSM), Secure by Design, and Industry Security Notices (ISNs).
• Knowledge of UK Government security standards, including Government Security Policy Framework (SPF), NCSC Cloud Security Principles, NCSC SaaS Security Principles, Cyber Essentials, and CHECK Penetration Testing Scheme.
• Familiarity with UK Government physical and personnel security requirements, including NPSA and UKSV.
• Experience conducting risk assessments using recognised methodologies such as IS1 and NIST SP 800-30.
• Strong written and verbal communication skills, with the ability to clearly justify and explain security requirements.
• Ability to build relationships with both senior stakeholders and technical teams.
• Strong organisational skills with the ability to manage multiple priorities.
• High attention to detail with a proven completer-finisher mindset.
• Competent user of Microsoft Word, Excel and PowerPoint.
• Knowledge of ISO 27001, CMMC and the NIST Cyber Security Framework, including SP 800-53.
• Familiarity with UK nuclear security regulations and ONR Security Assessment Principles (SyAPs).

Responsibilities:

• Support the implementation and continual improvement of our secure network security assurance frameworks, processes and procedures.
• Maintain our secure network accreditations and approvals, including risk assessments, security cases, compliance statements and supporting evidence.
• Conduct security assessments of core cloud platforms, including Microsoft 365.
• Support compliance with Defence Cyber Certification (DCC) requirements.
• Participate in cloud security assurance activities for both core and non-core cloud systems.
• Conduct compliance audits to ensure assurance activities are being completed across our secure networks and cloud services.
• Monitor changes to MOD, government and industry security standards, incorporating requirements into our assurance processes.
• Provide security assurance guidance to influence the design, operation and ongoing management of our secure environments.
• Maintain and periodically review our security risk assessments, communicating findings and tracking remediation activities.
• Monitor emerging cyber threats and assess their impact on our secure networks.
• Track and report progress against our security action plans.
• Engage with internal and external stakeholders, including security teams, project teams, HR vetting, procurement functions and MOD representatives.
• Support our security operating procedure updates and annual reviews.
• Assist with external audits, including ISO 27001 and client-led assessments.
• Oversee the security approval and ongoing assurance of third parties connecting to or handling information from our secure networks.
• Assess specialist devices requiring connection to our secure networks.
• Maintain a coordinated assurance programme to ensure activities are delivered on time.
• Provide reporting support and assurance metrics as required.

Technologies:

• Cloud
• Excel
• Support
• Microsoft 365
• Network
• Security
• Office 365

More:

We are recruiting for a Security Assurance Advisor role based in London, Epsom, Birmingham or Manchester, with hybrid working available. This is a 12-month opportunity with a day rate of £600 to £700 inside IR35. We are seeking an experienced Security Assurance Consultant with a strong Governance, Risk & Compliance background to support the security assurance and accreditation of secure networks and cloud environments within a UK defence-related setting. The role will focus on maintaining security approvals, conducting risk assessments, supporting compliance activities, and ensuring alignment with MOD and wider government security standards. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

last updated 39 week of 2026