> Markdown version of [/jobs/ext/343201-it-security-officer-assurance-submarines](https://www.wearedevelopers.com/jobs/ext/343201-it-security-officer-assurance-submarines). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Officer - Assurance - Submarines

- **Company:** Rolls-Royce
- **Location:** Derby, UK
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cyber Security, Network Security, Information Technology, CIS Benchmarks
- **Published:** June 11, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=8411ac77561e810d

## About the Role

Do you have experience in Network security?, At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles.

 * Risk Management and experience of identifying, assessing and mitigating security risks.
 * Experience of working in a assurance environment, providing reporting to key stakeholders.
 * Knowledge of cloud platforms (AWS, Azure), network security, and endpoint security.
 * Knowledge of IT security frameworks such as DEFSTAN 05-138, NIST Cybersecurity Framework, ISO 27001 and Cyber Essentials +.

## Description

We now have a new opportunity within the Rolls-Royce Submarines Security Department, based at the Raynesway site at Derby, for an IT Security Officer - Assurance to support the growing Submarines business, within our UK Defence Sector. This role reports to the IT Security Manager, Submarines. This role is responsible for ensuring IT Systems, processes and controls are secure and functioning effectively to protect against threats., Reporting to the IT Security Manager, the IT Security Officer - Assurance will provide assurance and be responsible for ensuring IT Systems, processes and controls are secure and functioning effectively to protect against threats. with the following primary responsibilities:

 * Develop, implement, maintain a validation assurance plan to test the effectiveness of security controls in alignment with mandated security frameworks.
 * Produce and conduct audits and assessments to confirm adherence to standards (Def-Stan 05-138, CIS Controls, CE+) using tools for efficiency.
 * Assess the correctness of security risk assessments and risk management plans, taking account of the business goals.
 * Audit the implementation, operation and maintenance of security controls.
 * Identify potential security risks and vulnerabilities in IT systems and evaluate the likelihood and impact of these and propose mitigations.
 * Implement and maintain the Security Policy, Procedures, Standards and Cyber Security Assurance Framework .
 * Coordinate penetration testing with third-party providers and support remediation activities.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)