Cyber Security Assurance Specialist

Cyber Security Assurance Specialist

• Cyber Security; Security Policy; Security Design; Info Sec; Accreditation; Risk Management

• HMG; NIST; DEFSTA; CCP; CISM; CISSP; RMADS; IAS

• £40,000 - £65,000 + bonus + excellent benefits

• Remote based (Occasional travel to Preston or Farnborough)

Would you like a varied role working on high profile cyber security projects? We currently have a vacancy for a Cyber Security Assurance Specialist. This is a remote role with very occasional travel to at our site in Preston or Farnborough.

As a Cyber Security Assurance Specialist, you will be working closely with a variety of projects throughout the organisation to provide security input, advice and assurance to ensure that security is embedded in the requirements and design early in the project lifecycle.

Your main responsibilities as a Cyber Security Assurance Specialist will involve:

• Promote a mind-set of developing secure systems and transfer knowledge of security standards and processes

• Ensuring that specifications and designs for services and systems comply with the security policy / standards and HMG security policy and standards

• Conducting HMG Information Assurance Standard (IAS) 1 risk assessments and reviewing existing risk assessments to identify changes to the organisational threat profile

• Preparing Risk Management and Accreditation Document Sets (RMADS)

• Conducting peer reviews of assurance activities produced by other team members

• Delivering security documentation at each checkpoint in the project delivery lifecycle

• Specifying cost effective controls and developing assurance requirements to feed into overall project specifications

• Developing accreditation plans, security cases and accreditation requirements in consultation with key stakeholders

• Reviewing technological documentation and providing input and advice to assure new or enhanced technologies meet requirements

• Liaising with security stakeholders to obtain approval for security aspects of design and the project security deliverables

Your skills and qualifications:

• Educated to degree level (or equivalent) preferably in a related discipline (ICT/Computing, assurance, risk management, vulnerability/threat assessment)

• Previous experience of providing security input and advice to projects in the Government sector or commercial organisations

• In-depth knowledge of HMG security policy, NIST, DEFSTAN 05-138 and good practice guidance and their application

• Wide ranging knowledge of application, infrastructure and security technologies and familiarity with implementing them in a secure configuration

• CCP, CISM or CISSP qualification