Cyber Security Assurance Senior Manager

At Defence Equipment & Support (DE&S), we supply and maintain vital equipment and services for the Royal Navy, British Army, and Royal Air Force. Together, we deliver a vast range of essential defence programmes and strive for what's next. Because it helps keep our military at the top of their game and our nation safe – for today, and tomorrow.

We offer 25+ days’ holiday, flexible and hybrid working, enhanced parental leave schemes, shopping discounts, and an exceptional employer pension contribution of 28.97%, to help make work work for you.

Nationality, visas, and vetting: For security reasons this role is open to sole UK nationals only. A ‘sole UK national’ refers to an individual who holds citizenship solely in the UK, without dual citizenship or nationality from another country.

We’re unable to offer visa sponsorship.

Join with SC clearance and obtain DV once in post : This role requires you to have lived in the UK for the last 10 years and obtain Developed Vetting (DV) security clearance. Clearance must be obtained without any caveats that prevent you from carrying out the role you have been recruited for. If it isn’t obtained or is obtained but with caveats that prevent you from carrying out the role, any conditional offer made to you will be withdrawn. Obtaining DV security clearance can be a lengthy process. You’ll join us once Security Check (SC) clearance is obtained, and then the more enhanced DV checks will continue after you’ve started your employment. If SC clearance isn’t obtained within 12 months, we reserve the right to withdraw any conditional offer made.

Job description

Are you ready to take the lead in safeguarding critical systems and infrastructure? At DE&S, we’re searching for a dynamic Cyber Security Assurance Senior Manager who’s ready to make a real impact on both organisational and national security. This is a high-profile opportunity where you’ll head up a talented team of Cyber Security Assurance specialists, collaborating with internal stakeholders, industry partners, and suppliers to deliver secure, resilient solutions.

You’ll be the driving force behind robust assurance processes, championing Secure by Design principles and providing expert guidance to senior stakeholders. Your influence will shape projects throughout the entire system life-cycle, ensuring security standards are upheld and innovation thrives across the supply chain.

This isn’t just a desk job—it’s a chance to broaden your horizons. With opportunities for international travel and involvement in global projects, you’ll experience variety, challenge, and the chance to build strong professional networks. As a leader, you’ll mentor your team, deliver exceptional results, and develop your own technical, strategic, and leadership skills along the way.

If you’re passionate about cyber security, thrive in a leadership role, and want to make a tangible difference, this is your moment. Join us and help advance cyber security assurance, protecting the systems and infrastructure that matter most.

We champion flexible ways of working. Regular in-person attendance is required (this is expected to be approximately 60% of your working week) to promote the benefits of face-to-face collaboration alongside flexibility of hours to support work-life balance and business need. Initially, you may be expected to attend more frequently to familiarise yourselves with the site, the team, and your role.

What you’ll be doing

• Leading teams of Cyber Security Assurance SMEs on large or complex projects, ensuring high-quality work that meets business needs, service levels, security outcomes, risk management activities, applying and maintaining frameworks aligned to the three Lines of Defence.
• Implementing Cyber Security Assurance processes, governance, and procedures, ensuring alignment with business requirements and Secure by Design principles.
• Collaborating, building, and maintaining strong relationships with internal stakeholders, industry partners, and suppliers to support the delivery of secure and resilient systems, and ensuring that security requirements are understood, implemented, and maintained throughout the supply chain.
• Providing guidance and assurance to ensure that systems, platforms, and infrastructure are adequately secured and meet organisational security needs.
• Advising senior stakeholders on Cyber Security Assurance, influencing project direction on Secure by Design and Cyber Security.
• Ensuring compliance with regulatory requirements and relevant legislation, working closely with suppliers and industry to uphold these standards.

Person specification

To be successful with your application, you'll need to show that you meet the following essential criteria:

• Degree in an IT related area or relevant experience. (Lead Criterion)
• Demonstrable proven experience in information risk management and decision-making.
• Hold OR show a commitment to working towards CompTIA Security+, or Network+, or Certified Information Security Management Principles (CISMP).

In addition to the responsibilities above, the following technical competences and behaviours will be assessed at interview:

• Core Behaviour 1: Delivering at pace – CSBC4
• Core Behaviour 2: Making effective decisions – CSBC4
• Technical Competence 1: Information risk assessment and risk management – Expert level
• Technical Competence 2: Secure supply chain management – Practitioner level