Ops and Assurance Security Manager

Our consultancy client is currently looking for an experience SC cleared Operations & Assurance Security Manager. You will be responsible for developing, implementing, and maintaining information security, risk management, and compliance frameworks. This role ensures that systems, processes, and data are protected against threats while meeting regulatory and corporate governance requirements. Due to the nature of the work as well as the clearance you must also be a sole British citizen.

Your work will cover:

Security Management

• Set direction for the development of security policies, standards, and procedures
• Oversee cybersecurity strategy and ensure protection of IT systems, networks, and data
• Support security incidents and lead incident response and remediation activities.
• Ensure regular vulnerability assessments and penetration testing is carried out in line with system life cycle management and continuous monitoring
• Ensure alignment with industry standards such as ISO 27001, Cyber Essentials, JSP 453 and JSP 440 Secure by Design
• Drive continuous improvement of the security programme, identifying gaps, emerging risks, and opportunities for enhancement.
• Manage and cohere security resource
• Ensure security resource is suitably qualified and experienced for the tasks and roles they are assigned

Risk & Assurance

• Manage security and operational risks across the contract
• Ensure Secure by Design and JSP 453 evidence packs are developed, maintained and remain current throughout the product's life cycle
• Lead internal and external audits, ensuring compliance with regulatory requirements
• Provide assurance reporting to senior management and stakeholders

Compliance & Governance

• Ensure compliance with relevant legislation (eg, GDPR, Data Protection Act)
• Develop governance frameworks and monitor adherence across the contract
• Work with legal and regulatory bodies on compliance matters

Stakeholder Engagement

• Collaborate with IT, operations, and business teams to embed security practices
• Provide training and awareness programs to promote a security-first culture
• Act as the primary point of contact for security and assurance-related matters
• Manage relationships with external partners, vendors and auditors.
• Overall management and coherence and stakeholder management.

Performance & Reporting

• Produce regular reports on security posture, risks, and compliance status
• Support business continuity and disaster recovery planning

You will need to be on site 3 days a week and the role will be outside IR35.