Cybersecurity Assurance Consultant

Bristol
3 days ago
Create job alert

Overview

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness unrelenting technological change to deliver innovations that provide a competitive advantage and improve everyday life worldwide.

As part of the Expleo Digital and Technology (DigiTech) team, you will report to the Head of Cybersecurity and work within our specialist Cybersecurity Practice. In this role, you will provide cybersecurity assurance within a complex marine/defence engineering programme, supporting the development and delivery of cyber-resilient systems.
This is a consultancy role focused on integrating cybersecurity into programme controls, technical assurance, and regulatory compliance. You will work closely with engineering leads, programme managers, and cybersecurity stakeholders to ensure that security requirements are appropriately defined, evidenced, and governed in alignment with relevant defence and maritime standards.

Responsibilities

Lead or support integrating cybersecurity assurance activities into engineering and programme delivery for marine and defence projects.
Develop, review, and maintain cybersecurity assurance artefacts, including risk assessments, assurance cases, control matrices, and evidence submissions.
Ensure alignment with applicable defence and industry standards and other MOD-aligned frameworks.
Engage with engineering and project teams to ensure cybersecurity is embedded into system design, technical planning, and programme governance.
Liaise with client representatives, suppliers, and accreditation authorities to support the assurance lifecycle and manage stakeholder expectations.
Support the preparation for and participation in technical reviews, audits, and risk acceptance activities.
Contribute to delivering security risk management processes, threat modelling sessions, and security design assessments.
Provide subject matter expertise on assurance requirements for secure communications, supply chain security, platform integration, and physical security interfaces.

Qualifications

A degree (or equivalent experience) in Cybersecurity, Information Assurance, Systems Engineering, or a related technical or defence-focused discipline.
Recognised cybersecurity certifications: CompTIA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent.
Familiarity with MOD, maritime, or defence-specific frameworks: JSPs, DEFSTAN, NIST, IEC 62443, IMO or ISO/IEC 27001.
SC clearance (or eligibility to obtain SC as a minimum) is required; DV clearance is desirable depending on the programme needs.Essential skills

Strong understanding of cybersecurity assurance principles, risk management, and regulatory compliance in defence or safety-critical environments.
Proven ability to produce and review assurance artefacts, including security management plans, risk registers, assurance cases, and audit-ready documentation.
Familiarity with MOD, defence, and marine security requirements, controls, and platform-specific standards.
Experience applying assurance frameworks or relevant equivalents in a programme or system engineering context.
Ability to interpret and apply security requirements across the engineering lifecycle, ensuring traceability and alignment with delivery controls.
Capable of contributing to threat modelling, risk assessments, and technical reviews with clear, structured input.
Confident working independently in complex, multi-stakeholder environments while managing priorities and deadlines effectively.

Desired skills

Familiarity with the Defence Digital approach to cybersecurity and assurance, including engagement with Accreditor and Authority roles.
Understanding secure systems engineering and its integration into the Systems Engineering V-Model or through-life engineering assurance models.
Exposure to product security assurance, safety-security interface assessments, or combined safety and security case development.
Knowledge of physical and personnel security controls in the context of platform or facility assurance.
Familiarity with engineering toolsets such as DOORS, Enterprise Architect, or security-specific tooling used in requirement traceability.

Experience

Proven experience in cybersecurity assurance, information assurance, or risk management, including delivery within defence, marine, or other safety-critical environments.
Proven track record in developing and maintaining assurance documentation.
Experience embedding Secure by Design principles across the engineering lifecycle, ensuring traceability of security requirements into system design and delivery.
Prior military service or experience working with the armed forces is highly valued, particularly in communications, security, or operational assurance roles.
Strong understanding of assurance governance and the role of cybersecurity in system integration, communications, or platform delivery contexts.
Experience collaborating with multi-disciplinary teams, including engineering, programme management, safety, and technical authorities.
Prior involvement in stakeholder assurance forums, technical reviews, or risk acceptance discussions within regulated environments.

What do I need before I apply

You must have the right to work in the UK

Related Jobs

View all jobs

Senior Consultant, Penetration Tester - Red Team | Remote UK

Senior Cyber Security Consultant - Defence

Security Architect

Graduate Cyber Security Consultant

Senior or Principal Security Consultant (Risk Management)

Principal Security Architect

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Negotiating Your Cybersecurity Job Offer: Equity, Bonuses & Perks Explained

How to Secure Compensation That Reflects Your Value in the UK’s High-Stakes Cybersecurity Sector Introduction As cyber threats grow more sophisticated and frequent, cybersecurity professionals have never been more in demand. From thwarting ransomware attacks to architecting secure cloud infrastructures, mid‑senior cybersecurity experts play a critical role in safeguarding a company’s data and reputation. Thanks to this growing reliance on cybersecurity, employers in the UK are going above and beyond simple salary offers to attract the top echelon of talent. Although base salary remains a key component of any job offer, the broader package—encompassing equity, bonuses, and perks—can often surpass what you’d gain from a small bump in monthly pay. For cybersecurity specialists working in areas such as threat intelligence, incident response, penetration testing, or compliance, the complexity and risk mitigation you bring to the table is massive. Knowing how to negotiate the entire package ensures you are duly rewarded for keeping an organisation’s data, assets, and operations safe. In this guide, we’ll delve into every aspect of negotiating a cybersecurity job offer. Whether you’re pivoting to a mid‑senior role or cementing your expertise at an established security consultancy, understanding the full range of compensation elements will help you secure an offer that acknowledges the criticality of what you do. Let’s explore equity options, performance bonuses, and the perks that matter most, so you can come out of your next job negotiation confident that you’re getting more than just a salary.

Cyber Security Jobs in the Public Sector: Protecting the UK’s Digital Future

Cyber threats have grown exponentially in recent years, targeting both private businesses and government institutions. As technology becomes ever more embedded in daily life—managing everything from national security to healthcare records—the risk of cyber attacks also increases. In the UK public sector, where vital services and sensitive citizen data are at stake, cyber security has become a top priority. For professionals looking for a meaningful career at the intersection of technology, national security, and public service, cyber security jobs in the UK public sector present an exciting and fulfilling path. In this blog post, we’ll delve into why cyber security is so critical to government agencies, the most in-demand roles, the skills and qualifications required, and how to navigate the application process. By the end, you’ll have a clearer sense of how you can leverage your technical expertise to protect the nation’s digital infrastructure.

Contract vs Permanent Cybersecurity Jobs: Which Pays Better in 2025?

Cybersecurity has become one of the fastest-growing and most crucial fields in modern business. With high-profile breaches dominating headlines and the ongoing digital transformation exposing organisations to new threats, companies across the UK are competing to attract skilled cybersecurity professionals. Roles range from penetration testers (pen testers) and SOC (Security Operations Centre) analysts to compliance officers, cloud security architects, threat intelligence analysts, and CISOs (Chief Information Security Officers). As demand continues to surge, cybersecurity salaries have climbed accordingly, and businesses have turned to more flexible hiring practices. Alongside permanent employment, many professionals explore short-term day‑rate contracting or fixed-term contracts (FTCs), searching for the ideal balance of pay, job security, and growth opportunities. Which arrangement truly pays better in 2025—and which best aligns with your ambitions? In this article, we dive into the contract vs. permanent debate with a focus on cybersecurity roles. We will examine the current market, the structure of day‑rate vs. FTC vs. permanent positions, the pros and cons of each, and some hypothetical pay comparisons. By the end, you should have a clearer sense of which career path might suit your situation and goals—whether you are a seasoned specialist aiming for top rates, or an up-and-coming analyst seeking a stable environment to develop in.