Act as a point of contact for client security teams on assurance matters.
Conduct vulnerability assessments, ITHCs, incident response activities, and evaluate responses to system security requirements.
Support accreditation and continuous assurance using recognised risk frameworks (ISO, NIST) and structured analysis methods.
Maintain and develop ISMS documentation and security artefacts (SyOPS, RMADS, Security Management Plans).
Contribute to the analysis of system security weaknesses and communicate findings to programme leads and engineering teams.
Understand security monitoring tools, logs, alerts, and protective monitoring systems (e.g., SIEM/SOC).
Maintain the Information Security Risk Register and coordinate monthly vulnerability management activities, ensuring remediation is tracked, reported, and aligned with the Security POAP.
Support delivery of contracted service levels and participate in security governance forums such as Security Working Groups.
Assist with security policy development, cryptographic assurance, audit support, and compliance with regulatory and client standards.
Requirements
Proven cybersecurity or information assurance experience.
Proficiency with common security tools (firewalls, IDS/IPS, antivirus, SIEM).
Familiarity with frameworks such as NIST, CIS, OWASP, ISO 27001.
Strong understanding of cybersecurity principles, CIA, risk management, and incident response.
Experience across the systems engineering lifecycle and its supporting processes.
Hands on experience with ITHC management, vulnerability assessment, and security assurance.
Familiarity with accreditation processes for secure/sensitive systems.