> Markdown version of [/jobs/ext/3879403-cyber-assurance-lead-defence](https://www.wearedevelopers.com/jobs/ext/3879403-cyber-assurance-lead-defence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Assurance Lead (Defence) - **Company:** VIQU Ltd - **Location:** London, UK - **Experience:** Expert - **Salary:** £80,000.0 - £100,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Customer Data Management, Javaserver Pages, Data Poisoning, National Institute of Standards and Technology Cybersecurity Framework, SC Clearance, AI Platforms, Machine Learning Operations - **Published:** October 23, 2026 - **Apply:** https://www.cv-library.co.uk/job/225751628/Cyber-Assurance-Lead-Defence ## About the Role * Security assurance experience within UK defence or national security, with hands-on application of Secure by Design * Working knowledge of JSP 440 and JSP 453, plus awareness of DCPP and Def Stan 05-138 * Experience turning technical evidence into robust assurance cases * Threat modelling on live systems using STRIDE, attack trees or similar methods * CISSP certification * Active SC clearance and eligibility for DV Desirable Experience * Experience assuring AI or machine learning systems, or knowledge of JSP 936 * Understanding of AI attack types such as prompt injection, data poisoning and agent tool misuse, including MITRE ATLAS * Familiarity with NCSC secure AI guidance and the UK AI Cyber Security Code of Practice * Structured assurance notations such as CAE or GSN, ideally linked to machine-readable evidence * Assurance work in air-gapped or classified environments * Running, auditing or developing ISO management systems such as ISO 27001 or ISO 42001 Working Environment * Permanent, full-time, hybrid from Belfast or London, with travel to customer sites ## Description Our client builds a sovereign AI platform for organisations that can't compromise on security, including defence, national security, central government, policing and heavily regulated industries. They deliver real capability into some of the UK's most sensitive environments, so every feature is threat modelled, hardened and properly assured before it goes near customer data. Security is central to the business and is now getting serious investment. The company is scaling a dedicated assurance function to match its growth in defence, and this hire is one of the founding roles in it. The Role You will own cyber assurance for the products and services delivered to the MOD and to allied defence and national security customers. Your job is to build the evidence-led assurance that customer risk owners depend on, applying Secure by Design for both UK and international partners. You will work with engineering, product, IT, commercial and leadership, and directly with customers and assurance authorities. The scope is broad and will change as the business grows, so it suits someone curious and self-driven who wants a real hand in shaping a security function and a direct influence on new capability for defence. Responsibilities * Lead Secure by Design for the product across defence deployments, in line with JSP 440 and JSP 453 * Develop assurance cases using a claims, arguments and evidence approach, built to keep pace with rapid agile delivery * Assure AI-enabled capability against JSP 936 and the wider MOD framework landscape * Apply NIST CSF, RMF, AI RMF and SP 800-53 where they fit * Act as the main point of contact for customer risk owners and cyber assurance authorities * Help shape and deliver the overall security strategy, and play a key part in building out the security function as the business grows * Champion good security practice across engineering teams