Cyber Security Assurance Specialist

Job Title\: Cyber Security Assurance Specialist

Location\: Preston or Frimley. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role

Grade\: GG10

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your line manager, you can contact your HRBP.

PLEASE NOTE\: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Job Description\:

This role is responsible for ensuring that the organisation’s IT systems, infrastructure and cloud-based services are secure and compliant with relevant security standards and policies. It involves assessing information security risks, identifying vulnerabilities, recommending appropriate mitigation measures and ensuring effective security controls are in place. The role also provides security assurance, technical and architectural guidance on secure solutions, produces compliance documentation and works with stakeholders across the business to continually improve security practices. It also acts as a subject matter expert, providing advice and expertise on security assurance across the wider organisation.

Core duties\:

• They are checking that systems are secure, identifying risks, recommending controls, and ensuring compliance with security standards and policies.
• Deliver assurance services to the business, EITS, IM&T Sector and Group Functions, covering CPE (Customer Premises Equipment) and cloud based systems.
• Identify risks and appropriate mitigation requirements, development & analysis of secure solutions (covering technical / physical / procedural / personnel controls) and assessment of compliance with internal and external standards and regulations.
• Deliver documentation to demonstrate compliance to internal and external stakeholders.
• Assessment and provision of control effectiveness in managing information security risk
• Provide security architecture / technical input into the development of secure solutions
• Support development of strategy and continual service improvement for the assurance function
• Act as a subject matter expert regarding assurance activities for the wider organisation

Essential Skills\:

• Cyber Security Assurance experience,
• Security Standards & Frameworks,
• Technical Security Knowledge,
• Risk Management

The Cyber Security Assurance team\:

The Cyber Security Assurance Team with Shared Services are part of Enterprise IT (EIT) with responsibility for assuring all enterprise managed systems and services, spanning UK/RoW. The team ensure systems / services are built and configured in-line with applicable Cyber Security Standards.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work, this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family, support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

A place where everyone can thrive\:

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

*We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date\: 20th November 2026