Cyber Security Specialist

Cyber Security Specialist

12 Month Duration 

£628 per day - Inside IR35

Hybrid - London

Overview

My client seeking an experienced Cyber Security Assurance professional to support the development and delivery of security assurance activities across complex IT and cloud environments.

The successful candidate will have a strong Governance, Risk and Compliance (GRC) background, with experience in security assurance, risk assessments, regulatory compliance and security governance within highly regulated environments.

You will play a key role in maintaining security assurance frameworks, overseeing compliance activities, advising stakeholders and ensuring that security risks are identified, assessed and appropriately managed. The role will involve working closely with technical teams, senior stakeholders and external organisations to ensure that security controls meet relevant government, industry and organisational standards.

Key Responsibilities

• Lead and coordinate security assurance activities across secure IT infrastructure, cloud platforms and associated services.

• Develop, maintain and improve security assurance frameworks, policies, procedures and governance processes.

• Produce and maintain security risk assessments, security justifications, compliance statements and supporting assurance documentation.

• Conduct security assessments of cloud-based systems, including Microsoft 365, and other core business platforms.

• Oversee compliance with relevant government security requirements, industry standards and recognised security frameworks.

• Carry out compliance audits to ensure security policies, controls and assurance activities are implemented effectively.

• Provide security assurance guidance throughout the design, implementation and operation of IT infrastructure and cloud environments.

• Regularly review security risks, communicate findings to stakeholders and track remediation activities through to completion.

• Monitor emerging cyber threats, vulnerabilities, regulatory developments and changes to security guidance, incorporating these into assurance processes.

• Coordinate security action plans and monitor progress across technical teams, business functions and external suppliers.

• Work collaboratively with security teams, IT professionals, project managers, procurement, HR and senior leadership.

• Support external audits and certification activities, including ISO 27001 and client-led security assessments.

• Assess and manage the security risks associated with third-party suppliers, systems, software, hardware and services connecting to secure environments.

• Develop and maintain Security Operating Procedures and supporting security documentation.

• Coordinate and manage the delivery of security assurance activities, ensuring deadlines and governance requirements are met.

• Prepare reports, recommendations and updates for security governance forums and senior management.

• Support the development of a structured security assurance function, including processes, communication channels, reporting mechanisms and document repositories.

• Provide assurance over relevant elements of the technology supply chain.

Essential Skills and Experience

• Demonstrable experience working in cyber security, particularly within government, defence, critical infrastructure or similarly regulated environments.

• Strong knowledge of security governance, risk management, compliance and assurance practices.

• Experience applying UK government and defence security standards, including Def Stan 05-138, the Defence Cyber Protection Partnership Cyber Security Model and Secure by Design principles.

• Familiarity with UK government security frameworks and guidance, including the Security Policy Framework, NCSC Cloud Security Principles, secure Software as a Service (SaaS) guidance and Cyber Essentials.

• Understanding of personnel and physical security principles within regulated environments.

• Experience conducting structured security risk assessments using recognised methodologies, such as NIST SP 800-30 or equivalent approaches.

• Strong written and verbal communication skills, with the ability to explain security risks, controls and recommendations clearly to technical and non-technical audiences.

• Proven ability to engage effectively with stakeholders at all levels, including senior leadership and technical teams.

• Excellent organisational skills, attention to detail and the ability to manage competing priorities.

• Proficiency in Microsoft Word, Excel and PowerPoint.

Desirable Skills and Experience

• Familiarity with international security standards and frameworks, including ISO 27001, the Cybersecurity Maturity Model Certification (CMMC) and the NIST Cybersecurity Framework.

• Knowledge of NIST SP 800-53 security controls.

• Experience working with nuclear industry security regulations, including Office for Nuclear Regulation (ONR) Security Assessment Principles.

• Familiarity with corporate security policies, assurance methodologies and governance processes.

• Experience supporting security certification, external audits and continuous improvement programmes.

Personal Attributes

• Highly organised, thorough and delivery-focused, with a strong eye for detail.

• Proactive in identifying risks, resolving issues and improving assurance processes.

• Confident working independently while collaborating effectively with multidisciplinary teams.

• Able to communicate complex technical and security matters in a clear, structured and practical way.

• Comfortable managing multiple workstreams and maintaining accurate, high-quality documentation.