> Markdown version of [/jobs/ext/1166247-information-security-assurance-officer](https://www.wearedevelopers.com/jobs/ext/1166247-information-security-assurance-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security & Assurance Officer - **Company:** Geotech Sub Alliance - **Location:** Leiston, UK - **Contract:** Permanent contract - **Skills:** Cyber Security, Identity and Access Management, Information Security Management, Phishing, Security Information and Event Management, Software Vulnerability Management, Data Logging, Information Security Management System, Data Classification, IT General Controls (ITGC), Office365, Information Technology, Data Management - **Published:** July 3, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=7b7d19ef572ba702 ## About the Role Essential * Demonstrable experience in information security assurance and technical cyber-security operations within a UK organisation * Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR / DPA 2018 * Hands-on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management tools * Experience leading or supporting security incident response, root-cause analysis and post-incident reviews, including working with SOC teams (internal or MSSP) * Ability to produce clear assurance reports, security documentation and executive-level dashboards * Strong stakeholder management skills, with the ability to translate technical risk into pragmatic business actions Desirable * Degree (or equivalent experience) in computer science, cyber security or a related discipline * Familiarity with SANS Top 20 Critical Security Controls and UK Cyber Essentials requirements * Experience operating in complex, regulated or safety-critical environments ## Description The Information Security & Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber-security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies. The role provides assurance across corporate and project systems, oversees integration with client security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation. What You'll Be Doing * Governance & Compliance: Implement and enforce client ISMP requirements across GSA, including security assurance levels, export control, information classification and data-handling rules. Maintain governance documentation, audit evidence and subcontractor security flow-downs, and support client, partner and third-party security reviews. * Security Assurance & ISMS Ownership: Own and operate the ISMS, including policies, standards and procedures. Complete and manage required security and privacy assessments (e.g. TPSA, SRA, DPIA, ECIA), track remediation actions, review suppliers, and ensure alignment with UK GDPR, DPA 2018, NIS2 (where applicable) and sector-specific standards. * O365 & Technical Security Oversight: Provide assurance over O365 and core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations. * SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security service providers. Lead or support incident response, root-cause analysis and post-incident reviews. * Stakeholder Engagement & Awareness: Act as a trusted adviser to IT, project teams and business units, translating technical risk into clear business impact. Deliver security awareness initiatives, phishing simulations and ongoing engagement with suppliers, auditors, MSSPs and SOC partners. * Continuous Improvement: Identify opportunities to optimise and automate security controls, contribute to the cyber-security roadmap and maintain awareness of emerging threats, technologies and industry best practice. You will promote company and client values and support a positive safety and security culture across all activities. ## Related Videos - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)