Security & Information Risk Advisor (SIRA) – SC Cleared
We are seeking experienced, security-cleared Security & Information Risk Advisors (SIRAs) to support digital transformation programmes for our secure client.
As a SIRA, you’ll act as the bridge between information security, delivery teams, and business stakeholders, providing expert risk guidance and helping ensure systems are secure, compliant, and aligned to HMG standards.
Key Responsibilities
Identify, assess, and manage security and information risks across digital services and technology estates.
Develop and maintain risk treatment plans, working closely with architects, delivery teams, and governance leads.
Collaborate with internal stakeholders and external suppliers to ensure risks are clearly understood and mitigated throughout the service lifecycle.
Maintain security risk registers and ensure risks are logged, tracked, and escalated appropriately.
Support the implementation of NCSC principles and ISO 27001, and internal security policy frameworks.
Contribute to security incident response planning and lessons learned reviews as required.Essential Experience
Active SC Clearance
Excellent stakeholder management skills
Experience acting as a SIRA or Security Risk Lead in central government, law enforcement, or national security programmes.
Knowledge of risk management methodologies (IS1/2, NIST, ISO 27005)
Experience working with or producing key assurance artefacts (RMADS, risk registers, SyOps, DPIAs)