Cyber Security Specialist (Live SC) - 12 months based Oxford or homeworking - Outside IR35

Cyber Security Specialist

Location: Hybrid / UK

Clearance: Active SC Clearance Required

About the Role

Join a high-profile research and engineering organization to safeguard a complex, hybrid digital estate spanning Enterprise IT, Cloud, and Operational Technology (OT/ICS). Sitting within the Cyber Security Group, this cross-functional position balances hands-on technical assurance with strategic architecture reviews, risk governance, and secure-by-design advocacy.

Key Responsibilities

• Design and advise on secure architecture patterns across Azure/Entra ID, M365 E5, and hybrid environments.
• Lead technical assurance assessments, maintaining enterprise risk registers using ISO 31000, FAIR, or OWASP frameworks.
• Guide teams on Secure-by-Design principles and Zero Trust implementations across IT and industrial environments.
• Drive compliance and internal/external audits against UK frameworks (GovAssure, NCSC CAF, ISO 27001, Cyber Essentials Plus).
• Evaluate threat intelligence, CVSS scores, and CVEs to manage vulnerability remediation plans.
• Communicate cyber risk clearly to non-technical leaders and senior stakeholders.

Key Requirements

• Clearance: Active SC clearance.
• Education: Degree in Cybersecurity, IT, STEM, or equivalent hands-on experience.
• Certifications (One or more): CCP, SIRA, CISSP, CRISC, CISM, SABSA, CCSP, SSCP, or GIAC.
• Experience:
• Proven track record in secure infrastructure/cloud design and technical risk assessment.
• Strong working knowledge of UK cyber frameworks (GovAssure, NCSC CAF, Cyber Essentials, ISO 27001).
• Hands-on familiarity with Microsoft security tools (Entra ID, Defender, SIEM/XDR), access control models (RBAC/ABAC), and EDR/vulnerability platforms.
• Desirable: Experience in regulated/government sectors, critical national infrastructure (CNI), or OT/ICS/SCADA security environments.

#J-18808-Ljbffr