Cyber Security Assurance Practitioner

Based in Preston/Farnborough (Remote working available)

£38,000 - £42,000 per annum + 2.5% bonus

Must be eligible for SC Clearance

Your role will be to ensure systems/services are built and configured in-line with applicable Cyber Security Standards.

What you'll be doing:

• Deliver the Cyber through life Assurance capabilities to assure the compliance and effectiveness of applicable Cyber security controls to meet NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS).
• Assist in the delivery of Cyber Essentials and Cyber Essentials plus certification across applicable EIT enterprise managed networks (UK and International) to meet MoD DEFCON contractual requirements.
• Support other Information Security certifications such as ISO/IEC 27001/FAR to underpin international networks and differing overseas requirements.
• Support the delivery of an intelligence led and risk-based compliance programme across Sectors, UK Business Groups and Service Providers to underpin HMG Secure by Design requirements.
• Report the Performance/Health of applicable security controls to assure compliance and effectiveness aligned with NIST (DFARS), DEFSTAN, HMG Secure by Design requirements and/or Group Cyber Security Standards (GCSS) to highlight key issues to senior stakeholders.

Your skills and experiences:
Essential:

• Strong track records of assuring/auditing the security of services in the Government sector (or commercial organisations bound by HMG standards)
• Strong analytical background with the ability to analyse and interpret large and complex data sets and articulate observations, conclusions, and recommendations to senior audiences
• Knowledge of HMG and industry standard security policy, standards and good practice guidance and their application to a variety of IT solutions processing protectively marked information
• Wide ranging knowledge of application, infrastructure and security technologies and knowledge of implementing them in a secure configuration
• Previous exposure to gap analysis reporting
• ISO/IEC 27001 knowledge
• CISM-P IT Security qualification

Desirable:

• NSCP Practitioner Certificate