Security Assurance Consultant

Security Assurance Consultant

Clearance: SC clearance required as a minimum

Rate: up to 620pd outside IR35

Duration: 9 months

Location: Corsham (2-3 days per week onsite)

We are looking for an experienced Security Assurance Consultant to support a major UK Defence programme, providing assurance across complex, sensitive systems and environments.

This role would suit someone with a strong background in MOD, Defence Digital, secure systems, risk management, and evidence-based assurance. You will work closely with technical teams, programme stakeholders, and security authorities to ensure security risks are understood, managed, and appropriately documented.

Key responsibilities: Deliver security assurance activity across a Defence programme, ensuring alignment with MOD and government security requirements. Support the production and review of security documentation, risk assessments, assurance artefacts, and evidence packs. Engage with stakeholders across technical, delivery, and governance teams to identify risks, gaps, and improvement actions. Provide advice on security controls, accreditation, assurance processes, and risk management. Support security governance meetings and help ensure assurance outputs are clear, accurate, and defensible. Required experience: Previous experience working within Defence, MOD, or secure government environments. Strong understanding of security assurance, risk management, and accreditation processes. Experience producing high-quality security documentation and assurance evidence. Knowledge of MOD security policies, Secure by Design, JSPs, NIST, ISO 27001, or similar frameworks. Ability to work confidently with technical and non-technical

Previous experience working within Defence, MOD, or secure government environments. Strong understanding of security assurance, risk management, and accreditation processes. Experience producing high-quality security documentation and assurance evidence. Knowledge of MOD security policies, Secure by Design, JSPs, NIST, ISO 27001, or similar frameworks. Ability to work confidently with technical and non-technical