In this role you will lead information security governance and assurance across UK Public Safety and National Security programmes, ensuring compliance with government policy and contractual obligations. You will act as a trusted adviser to programme teams, translating complex requirements into practical controls. You’ll work with cross-functional partners to embed security early in delivery and reduce friction while maintaining strong risk management. This is a high-impact role that supports customer confidence, programme delivery, and revenue by preventing breaches and delays.
Responsibilities
Define and implement information and operational security policies aligned with UK Government policy and contractual obligations
Provide information security governance across UK national security programmes and translate requirements into scalable controls
Support audits, assurance reviews, and accreditation activities
Lead information security governance across the programme lifecycle and embed security in design and delivery
Review contractual security documents and ensure security flow-down into delivery
Manage security risk assessments and ensure escalation to governance bodies
Guide handling, storage, and sharing of sensitive information and advise on Microsoft tooling for secure collaboration
Provide incident management support and post-incident reviews
Engage with stakeholders across engineering, sales, legal and leadership to communicate risks clearly
Key requirements
Demonstrable experience in information security, operational security, or government security roles
Ability to obtain and maintain UK Government DV security clearance
Experience supporting large, complex programmes for UK Government, defence or national security customers
Knowledge of UK Government security policy and information handling requirements
Desirable: CISSP, CISM, CCSP (not required)
Stakeholder-management and relationship-building
Independent yet collaborative work style
Adaptability and tolerance for ambiguity
Information security governance and policy
Security risk management and assurance
Contract security interpretation and control implementation
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.