Join to apply for the Cybersecurity Assurance Consultant role at Expleo Group
Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovations that provide a competitive advantage and improve everyday life worldwide.
As part of the Expleo Digital and Technology (DigiTech) team, you will report to the Head of Cybersecurity and work within our Cybersecurity Practice. In this role, you will provide cybersecurity assurance within a complex marine/defence engineering programme, supporting the development and delivery of cyber-resilient systems.
This is a consultancy role focused on integrating cybersecurity into programme controls, technical assurance, and regulatory compliance. You will work closely with engineering leads, programme managers, and cybersecurity stakeholders to ensure security requirements are appropriately defined, evidenced, and governed in line with defence and maritime standards.
The role offers the opportunity to influence mission-critical projects within the marine and defence domain, applying structured cybersecurity assurance approaches to complex, multidisciplinary environments.
Responsibilities
1. Lead or support cybersecurity assurance activities in marine and defence projects.
2. Develop, review, and maintain assurance artefacts like risk assessments, assurance cases, control matrices, and evidence submissions.
3. Ensure compliance with defence and industry standards, MOD frameworks, and regulations.
4. Engage with engineering and project teams to embed cybersecurity into system design and governance.
5. Coordinate with clients, suppliers, and authorities to support assurance lifecycle and stakeholder expectations.
6. Assist in technical reviews, audits, and risk acceptance activities.
7. Contribute to threat modelling, risk assessments, and security design evaluations.
8. Provide expertise on assurance requirements for secure communications, supply chain, and physical security interfaces.
9. Maintain high-quality documentation to support certification and compliance.
10. Support internal knowledge sharing and continuous improvement of assurance methodologies.
Qualifications
1. Degree or equivalent in Cybersecurity, Information Assurance, Systems Engineering, or related field.
2. Recognised cybersecurity certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor).
3. Knowledge of MOD, maritime, or defence frameworks (JSPs, DEFSTAN, NIST, ISO 27001).
4. SC clearance or eligibility; DV clearance desirable.
5. Continuous professional development in cybersecurity assurance and defence standards.
Essential Skills
1. Strong understanding of cybersecurity assurance principles in defence or safety-critical environments.
2. Experience producing assurance artefacts and documentation.
3. Familiarity with defence security requirements and standards.
4. Ability to interpret and apply security requirements across the engineering lifecycle.
5. Excellent stakeholder engagement and communication skills.
6. Experience with threat modelling, risk assessments, and technical reviews.
7. Ability to work independently in complex environments.
8. Attention to detail in assurance and audit documentation.
9. Methodical, professional, and delivery-focused approach.
Desired Skills
1. Knowledge of Defence Digital cybersecurity approaches.
2. Understanding of secure systems engineering and assurance models.
3. Experience with product security assurance and safety-security interfaces.
4. Knowledge of physical and personnel security controls.
5. Familiarity with engineering tools like DOORS or Enterprise Architect.
6. Contributions to assurance framework development and tooling standards.
Experience
1. Proven experience in cybersecurity assurance in defence or safety-critical environments.
2. Experience in developing assurance documentation and embedding Secure by Design principles.
3. Involvement in third-party assurance activities and working with MOD standards.
4. Military or armed forces experience is highly valued.
5. Understanding of assurance governance and system integration security.
6. Experience collaborating with multidisciplinary teams and assurance forums.
7. Strong communication skills for audit and compliance documentation.
8. Experience within MOD or maritime defence programs, especially platform integration.
9. Experience with defence supply chains and collaborative assurance.
Pre-requisites
1. Right to work in the UK.
2. At least 8 years of practical cybersecurity engineering or infrastructure security experience.
3. Proactive, adaptable, and capable of working independently.
4. Current or eligible for SC clearance.
Benefits
1. Collaborative environment with clients and peers.
2. Opportunities for skills development and inspiring projects.
3. Access to ExpleoAcademy training courses.
4. Competitive benefits package.
5. Inclusive, supportive workplace promoting diversity and adjustments for disabilities.
We are an equal opportunities employer and welcome applications from all qualified persons regardless of race, sex, disability, religion, sexual orientation, or age. We are committed to fairness and providing support for all employees.
J-18808-Ljbffr