Information Risk Assurer

• Develop and update Information Assurance processes, policies and local standards
• Review system and solution designs to ensure secure-by-design principles are applied
• Identify information security risks and provide proportionate mitigation recommendations
• Produce clear security guidance for users and delivery teams
• Advise on security requirements for new and existing IT systems, including cloud services
• Review third-party security questionnaires and assess supplier suitability during onboarding
• Support accreditation activity through security documentation, risk assessments and assurance artefacts

• Proven experience in Information Assurance or Information Security within a complex environment
• Strong understanding of information risk management and secure system design
• Experience assessing technical designs and third-party security controls
• Knowledge of relevant government or policing security standards and frameworks
• Ability to communicate security requirements to technical and non-technical stakeholders
• Must hold or be eligible for NPPV3 and SC clearance

Public sector or policing experience is highly desirable