Information Security Assurance Manager (Salisbury, GB, SP11 8HT)

Job Title: Information Security Assurance Manager

Location: UK, Fully Remote + Regular Travel to Andover, Hampshire and Stoke Gifford, Bristol

Compensation: Competitive Salary + Benefits

Role Type: Full time / Permanent
Role ID: SF73294

Help shape the security of systems that support critical defence capability

At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play your part as an Information Security Assurance Manager.
The role

As an Information Security Assurance Manager, you’ll have a role that’s out of the ordinary. You'll provide expert security assurance across operational systems, suppliers and data environments, ensuring ongoing compliance with contractual, regulatory and customer security requirements. This role offers the chance to work at the forefront of information security within the defence and engineering sector, helping safeguard systems that support national security while developing your expertise within a leading global organisation.
Day-to-day, you'll be required to:

- Providing information assurance support for live services, operational systems, suppliers and data flows throughout the service lifecycle.

- Leading the development, maintenance and continuous improvement of information security management plans.

- Advising Information Owners, service delivery teams and business stakeholders on security controls, compliance obligations and risk management.

- Collaborating with IT operations, commercial teams and delivery partners to embed effective security practices across business operations.

- Ensuring alignment with contractual, legislative and customer security requirements, including recognised government and industry standards.

This role is full time, 37.5 hours per week. This role is fully remote; however, regular travel is required to internal and/or customer sites, including Andover and Bristol.

Essential experience of the Information Security Assurance Manager

- Experience working within information security assurance or a related security, governance or risk management role.

- Strong understanding of technical risk assessment methodologies and security risk management principles.

- Excellent communication and stakeholder management skills, with the ability to engage both technical and non-technical audiences.

- Experience working with UK Government security classifications, Ministry of Defence assurance frameworks or secure system lifecycle principles.

- Ability to influence and support operational teams in implementing proportionate and effective security controls

Qualifications for the Information Security Assurance Manager

- Relevant professional experience demonstrating expertise in information security assurance, governance or risk management.

- CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor certification - desirable

- CCP Security and Information Risk Advisor or Security Architect accreditation - desirable

- Knowledge of JSP 453, NIST SP 800-171, DefStan 05-138 or similar security frameworks - desirable

- Understanding of Data Protection Act 2018, United Kingdom General Data Protection Regulation, export controls and associated compliance requirements - desirable

Security Clearance

The successful candidate must be able to achieve and maintain Security Check (SC) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk).
What we offer

- Generous holiday allowance

- Matched contribution pension scheme, with life assurance

- Access to a Digital GP, annual health check, and nutritional consultations through Aviva DigiCare+