Job Description:

Cyber Security Assurance Specialist

Location: Culham, Oxfordshire (2–3 days onsite per week)
Contract Length: Until 18 December 2026
Rate: £55 per hour (Umbrella)
IR35 Status: In Scope
Security Clearance: Active SC (or lapsed within last 24 months) – mandatory
CV Deadline: Tuesday 28th at 12:00

About the Role

We are seeking an experienced Cyber Security Assurance Specialist to support a high-profile programme focused on advancing sustainable energy solutions. This role operates within a complex, hybrid technology environment spanning enterprise IT, Operational Technology (OT), and research platforms.

You will play a key role in strengthening cyber security posture across the organisation, combining hands-on technical expertise with strategic advisory input. The focus will be on security assurance, risk management, and embedding secure-by-design principles across infrastructure, cloud, and application landscapes.

Key Responsibilities

Conduct technical risk assessments across IT, OT, and cloud environments

Provide secure design guidance for infrastructure, cloud, and application projects

Maintain and update enterprise security risk registers

Lead security assurance reviews aligned to frameworks such as GovAssure, CAF, and ISO 27001

Evaluate architectural risks associated with key technical changes

Support vulnerability management and remediation planning

Embed risk-aligned security controls across platforms and services

Develop and maintain security standards, templates, and documentation

Support internal and external audits, including compliance evidence gathering

Contribute to Zero Trust architecture initiatives

Assess third-party suppliers against defined security criteria

Deliver knowledge-sharing sessions to technical teams

Represent Cyber Security within design and architecture governance forums

Essential Skills & Experience

• Proven experience designing and implementing secure cloud or infrastructure architectures
• Strong background in cyber risk assessment and enterprise risk management
• Familiarity with risk methodologies (e.g. ISO 31000, FAIR, OWASP risk rating)
• Solid understanding of security frameworks, including:
  • GovAssure
  • Cyber Assessment Framework (CAF)
  • ISO 27001
  • Cyber Essentials / CE+
  • NIST
• Experience supporting audits and driving remediation activities
• Hands-on experience securing platforms such as:
  • Microsoft Entra ID (Azure AD)
  • Microsoft 365 E5
  • Azure IaaS/PaaS
  • Windows, Linux, Unix environments
• Knowledge of security tooling (SIEM, EDR/XDR, vulnerability management platforms)
• Experience with access control models (RBAC, ABAC) and logging standards
• Understanding of incident management, threat intelligence, CVEs, and CVSS scoring
• Familiarity with ITSM processes and change control
• Experience with secure software supply chain and CI/CD security
• Strong stakeholder engagement and communication skills

Desirable Skills & Qualifications

• Degree in Cyber Security, IT, or related STEM discipline
• Industry certifications such as CISSP, CISM, CRISC, CCSP, SABSA, GIAC, CCP, or SIRA
• Experience in government, regulated, or critical infrastructure environments
• Knowledge of OT / ICS / SCADA security

Additional Information

No flexibility on pay rate or security clearance requirements

Maximum of 2 CVs per supplier

Role may close early with minimal notice if sufficient applications are received

Interview process conducted via MS Teams or face-to-face