Cloud Security Assurance Specialist

In this role you will lead cloud security assurance for UK defence projects, validating cloud services against MOD and government security standards. You collaborate with technical teams and senior stakeholders to ensure secure cloud delivery, maintain ongoing compliance, and drive risk mitigation. The position involves assessing against NCSC principles, supporting audits, and presenting findings to governance forums. It offers a meaningful impact on secure defence digital services and regulatory conformity.

• Lead cloud security assurance from initial assessment through to approval
• Assess cloud services against NCSC Cloud Security Principles and relevant MOD security standards
• Oversee ongoing compliance, security action plans, audits and third-party access
• Advise project teams on secure cloud configuration and risk mitigation
• Monitor emerging threats, regulatory changes and evolving security guidance
• Support Defence Cyber Certification, ISO 27001 and MOD security audits
• Present assurance findings and recommendations to senior governance stakeholders

• Proven experience in cloud security assurance within a UK MOD or defence environment
• Strong knowledge of NCSC Cloud Security Principles and secure SaaS guidance
• Familiarity with MOD security standards, including Def Stan 05-138, Secure by Design and the Cyber Security Model
• Understanding of UK Government security, personnel vetting and compliance requirements
• Excellent stakeholder management, written communication and reporting skills
• SC clearance required
• Desirable: ISO 27017, ISO 27018, Cloud Security Alliance frameworks or UK nuclear security regulations

• stakeholder management
• written communication
• reporting skills
• NCSC Cloud Security Principles
• MOD security standards (Def Stan 05-138, Secure by Design, Cyber Security Model)
• UK Government security and vetting requirements