My client is a global IT consultancy working within defence. This role is completely client facing so will require attendance on site 5 days per week in either Leatherhead or Reading

This role is a 6 month contract and will require DV Clearance, please do not apply if you do not hold active DV Clearance

Overview
As Security Assurance Consultant is part of the Security Assurance Team (SAT), providing risk management and assurance of programme artefacts. The roles principally includes security manager on programmes of work collaborating across enterprises to produce end-to-end security solutions. Additional roles will also include the delivery of security training and content and supporting the promotion of a positive security culture. The role requires close collaboration with Security Architects, Testers, Engineers and senior stakeholders to achieve the balance between delivering security assured products and supporting speed of delivery. Reports to Security Lead; day to day work is managed by allocated team Scrum Master.

Responsibilities and Tasks
Support delivery of secure Releases and Features aligned with the relevant Legacy or NIST assurance processes through Security Assurance stories agreed with nominated team Scrum Master
Create security assurance case for releases, including risk assessments and mitigations for identified defects and vulnerabilities
Liaise with Testers, Security Architects and Engineers to ensure smooth assurance process and timely delivery of contribution to assurance cases.
Define Penetration Test and IT Health Check (ITHC) scope for relevant team
Liaise with Joint Design Team on scope and submission of assurance case
Keep Security Lead informed of progress within team and of any potential conflicts where Security Assurance issues may impede delivery
Provide security approval for service support activities, including IMPEX to various systems
Conduct daily checks (as part of rota) as required on nominated systems
Support incident investigation and security training and briefings
Support development of relevant security documentation; including RMADS, CoCo, RAR, SSP, POAM, OSMP (including SyOps).
Where delivery priorities permit, support the provision of Authority services when Authority is unable to provide such services
Propose Risk Register entries to the Security Lead or Security Assurance Lead as required to agree areas of residual risk with the Authority
Escalate relevant security issues via the Security Lead or Security Assurance Lead for resolution at the security working group

Knowledge, Experience and Capabilities

Cyber Security Assurance
ISO27001
NIST 800-53 series
MOD Secure by Design
Information assurance
Risk management
High quality of written and verbal communication skills
Experience of working in Secure environments (Highly desirable)