Information & Cybersecurity Assurance Manager

About the role

This senior security assurance position sits within a highly technical and regulated environment, covering cybersecurity, information assurance and Secure by Design. You will own key security workstreams across products, services and major programmes, ensuring contractual security obligations are met throughout the project lifecycle.

Key responsibilities

• Provide assurance against contractual security obligations, including ISO 27001, CE+ and DCC compliance.
• Lead certification activities, vulnerability management exercises and external penetration testing, verifying remediation.
• Review infrastructure, cloud and application designs against Secure by Design principles and conduct risk assessments for new technologies.
• Participate in Change Advisory Board meetings, support incident response and business continuity plans.
• Manage third‑party supplier security compliance and security aspects of space licensing throughout the spacecraft lifecycle.

Required profile

• Proven security assurance experience in defence or a similarly secure environment, preferably as a Delivery Team Security Lead or Security Assurance Coordinator.
• Hold or have held certifications such as ChCSP, CISM, CISA, BCS CISMP or CMIRM and be a member of a recognised cybersecurity professional body.
• Eligible for National Security Vetting at SC level with at least 5 years continuous UK residency.

Required skills

• ISO 27001, CE+, DCC and NIST SP 800‑53 frameworks.
• Secure by Design principles, vulnerability management and penetration testing.
• Risk assessment, threat modelling and security architecture design.
• Experience with cloud and infrastructure design reviews.