Overview
We are seeking an experienced Information Security Specialist to provide expertise in Information Security and Information Assurance for complex transformation programmes, particularly within Public and Defence sectors. The contractor will collaborate with technical teams, stakeholders, and delivery partners to ensure compliance with security standards while supporting projects through governance and accreditation processes. This hybrid role entails three days on-site per week and offers a chance to contribute to high-impact projects in sensitive environments.
Responsibilities
- Provide Information Security and Information Assurance guidance across complex programmes and projects.
- Conduct security risk assessments and identify appropriate risk treatment and mitigation measures.
- Support the development, review and maintenance of security documentation and assurance artefacts.
- Assess systems, architectures and technical solutions against relevant security policies, standards and frameworks.
- Work closely with architects, engineers, project teams and stakeholders to embed security throughout the delivery lifecycle.
- Identify, document and communicate security risks, vulnerabilities and control requirements.
- Support security governance, assurance reviews and accreditation activities.
- Provide clear security advice to both technical and non-technical stakeholders.
Requirements
- Strong experience within Information Security, Information Assurance or Cyber Security roles.
- Proven experience conducting security risk assessments and managing security risks.
- Good understanding of security governance, controls, policies and assurance processes.
- Experience working with recognised security standards and frameworks such as ISO 27001, NIST or NCSC guidance.
- Ability to review technical designs and translate security requirements into practical controls.
- Strong stakeholder management and communication skills, with the ability to engage effectively across technical and business teams.
- Experience working within complex transformation, infrastructure or technology programmes.
- Previous experience within Public Sector, Defence or other highly regulated/sensitive environments is desirable, but not essential.