Security Assurance Lead

Salary: £61,000 - 101,000 per year

Requirements:

• We require experience in information security, including security assessment or assurance roles.
• We require demonstrated experience conducting security design reviews and assessments.
• We require a strong background in defence, aerospace, or government security programmes.
• We require experience with security certification and accreditation processes.
• We require experience managing a team in a security or joint design team function.
• We require working knowledge of IT architecture and design principles.
• We require a comprehensive understanding of IT security controls and security frameworks.
• We require strong knowledge of network, infrastructure, application, and data security.
• We require understanding of threat modelling and risk assessment methodologies.
• We require knowledge of ITAR regulations and export control requirements.
• We require understanding of security standards such as ISO 27001 and NIST CSF.
• We require practical knowledge of common IT architectures and technologies.
• We require strong analytical and problem-solving skills.
• We require excellent leadership skills.
• We require excellent written and verbal communication skills.
• We require attention to detail with the ability to identify gaps and inconsistencies.
• We require a collaborative approach to working with architects and technical teams.
• We require the ability to explain complex security concepts clearly.
• We require a professional approach to challenging design decisions on security grounds.
• We require the successful candidate to be eligible to meet UK Government and contractual personnel security requirements, including applicable residency requirements, and to have the right to work in the United Kingdom.
• Some roles may also be subject to nationality requirements where necessary to meet UK Government or contractual security obligations.

Responsibilities:

• We lead security design review, assessment, and assurance for defence and aerospace IT programmes.
• We provide technical security guidance to joint design teams.
• We conduct security assessments of proposed IT solutions.
• We ensure security compliance and identify security risks.
• We recommend security controls and mitigation strategies.
• We conduct detailed security reviews of IT architecture and design documentation.
• We assess security controls and identify gaps against security requirements.
• We evaluate threat models and security assumptions underlying IT designs.
• We review security specifications for completeness and compliance.
• We identify residual security risks and recommend mitigation strategies.
• We support authority leads and advise third parties.
• We verify IT designs comply with Defence Security Policy and Classification Guides.
• We assess adherence to ITAR regulations and export control requirements.
• We review security controls against IS1 (IS1A) and other security standards.
• We validate data handling and classification compliance.
• We ensure personnel security and vetting requirements are addressed.
• We participate actively in joint design team meetings and architecture workshops.
• We provide security input to infrastructure, network, and application architecture decisions.
• We review proposed solutions from a security perspective and recommend alternatives.
• We challenge assumptions and help identify security risks early in the design phase.
• We support customer security decision-making through technical analysis.
• We prepare detailed security assessment reports documenting findings and recommendations.
• We document security control specifications and implementation guidance.
• We create security assessment matrices and compliance traceability matrices.
• We provide executive summaries of security findings for stakeholder communication.
• We maintain security documentation for compliance and audit purposes.
• We conduct security risk assessments using appropriate risk methodologies.
• We develop risk matrices and prioritise risks based on likelihood and impact.
• We track risk mitigation and provide assurance of control implementation.
• We validate implementation of recommended security controls.
• We review security test plans and validation approaches.
• We provide assurance that security controls operate effectively.
• We support security certification and accreditation activities.
• We document security assurance evidence for compliance.
• We communicate security findings and recommendations clearly to technical and non-technical stakeholders.
• We facilitate security discussions between the design team and customer security teams.
• We explain complex security concepts in accessible language.
• We support customer understanding of security requirements and implications.

Technologies:

• Support
• Network
• Security

More:

DXC Technology is committed to building diverse, inclusive teams and welcomes applications from all backgrounds, with particular encouragement for women, underrepresented groups, and neurodivergent candidates. We provide reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment where everyone can thrive. This Security Assurance Analyst role is based in Hampshire and is onsite five days per week. We believe strong connections and community are key to our success, and our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We are committed to fostering an inclusive environment for our people.

last updated 39 week of 2026