- Workplace
- Remote, Hybrid
- Type
- Full-time
- Department
- Finance
- Seniority
- Lead
- Closing date
- Today
- Source
- Vincere
Description
Principal Cyber Risk Management & Assurance Advisor (SC Cleared)
Location: Hybrid (London or Manchester or Bristol) and remote working
Rate: £750 per day
Duration: 6 Months
IR35 Status: Inside
Start: ASAP
Role Overview:
A Principal Cyber Risk Management & Assurance Advisor (SC Cleared) is required for our Government Client to lead on cyber and information security risk management, assurance and architectural advisory for major applications and digital services during the alpa, beta and early live phases.
You will also deliver critical security assessments and IT Health Checks, providing expert assurance across portfolio projects, with a focus on SaaS tooling compliance against NCSC Cloud Security Principles.
Facilitate and oversee Security Working Groups throughout all key development and deployment stages, ensuring risks are tracked, logged, and reported to the Head of Cyber Risk and Assurance, with actionable recommendations provided.
Produce formal risk assessments and risk treatment plans (RTPs) for all digital services and associated tooling, ensuring robust protection in accordance with business risk.
Develop, review, and advise on Secure by Design policies/practices, including safe use of AI, secure coding, and regulatory compliance frameworks (e.g., OWASP, DPIA, GovAssure).
Essential Skills & Experience required:
Must possess current SC Level Security Clearance *essential*
Previous experience of working in other large government departments on security risk management is desirable
Able to provide evidence of applying relevant standards or regulatory policies for risk insurance
Possess a deep understanding of "secure by design"
Proficient in cyber security risk management
Also to possess knowledge of Cloud environments/Cloud development and AWS
Knowledge/experience with SaaS
Any Assurance of AI is desirable
Coordinate cross-platform activities and enable secure delivery of new services, including supporting incident management and continuous improvement of live service security practices.
If this role is of interest, please email your CV to: [email protected]