Secure by Design lead for Defence
Standard 8 · Guildford ·
- Seniority
- Lead
- Category
- Design
- Experience
- 10+ years
A senior Security Assurance Manager role (hybrid, Guildford) owning cybersecurity and information assurance across a defence organisation's products, programmes and spacecraft lifecycle — spanning Secure by Design reviews, ISO 27001/CE+/DCC certification, ITHCs, supplier security and space licensing assurance. Requires hands-on Defence Secure by Design delivery and SC/DV vetting eligibility.
Cybersecurity Assurance Manager - Secure by Design
UK Defence Sector | Guildford | Hybrid
Must be eligible to attain National Security Vetting at SC or DV is desirable, which would require 10 years unbroken residency in the UK.
We're recruiting on behalf of a leading defence organisation for a Security Assurance Manager to own cybersecurity and information assurance across their products, programmes and spacecraft lifecycle.
This is a broad, senior assurance role - spanning certification (ISO 27001, CE+, DCC), ITHCs, Secure by Design reviews, supplier security, and space licensing assurance. You'll sit across Change Advisory Boards, incident response, and executive-level reporting.
This is the one thing that matters most for this role:
You need to have personally delivered Secure by Design assurance within a Defence programme. Not just an understanding of the framework - hands-on ownership: engaging with system and design owners, running gap analysis against security controls, and taking something through to a real outcome such as Authority to Operate or formal accreditation. If that's not something you've genuinely done, please don't apply - the client has been explicit that there isn't time to build this knowledge up from scratch.
What you'll need:
- Hands-on Secure by Design delivery experience in a Defence programme - as a Delivery Team Security Lead, Delivery Team Security Engineer, or Security Assurance Coordinator
- Hold, or have held, CISM, CISA, BCS CISMP, ChCSP or CMIRM
- Membership of a cybersecurity or information risk body (CIISec, IRM, or similar)
- Eligible for National Security Vetting at SC or above, with 5+ years unbroken UK residency (DV desirable)
- Proven delivery of security artefacts — Security Management Plans, Risk Registers, Security Requirements Documents, RMADS, Threat Models
- Experience coordinating ITHCs, including scoping and remediation prioritisation
- Technical understanding at architecture, design and audit level
If you've owned Secure by Design assurance on a Defence programme and can talk through a specific example of what you delivered and what it achieved, we'd like to hear from you.