At a Glance
- Tasks: Lead ISO 27001 compliance and drive information security governance in a dynamic public sector environment.
- Company: Join a highly regulated organisation undergoing significant transformation.
- Benefits: Competitive contract rate, flexible working options, and opportunities for professional growth.
- Other info: Engage with senior stakeholders and shape the future of information governance.
- Why this job: Make a real impact on information security during a crucial organisational change.
- Qualifications: Active MoD DV clearance and experience in ISO compliance within complex environments.
The predicted salary is between 40000 - 50000 £ per year.
Location: On-site / hybrid (UK)
Clearance: MoD-DV (active)
Employment Type: Contract
Sector: Public sector / highly regulated environment (secure on prem / data centre / supercomputing)
Overview: We're looking for a MoD-DV cleared ISO Security Advisor / Information Security SME to support a highly regulated organisation running a secure on-prem environment (including data-centre hosted, high-performance computing). The focus is information security, governance and assurance-driving and evidencing compliance while the organisation moves through a significant public-sector transformation / operating model change and associated cost pressures. This is not a "hands-on cyber engineering" role. It is a policy, process, assurance and ISO transformation position, working closely with technical and leadership stakeholders to ensure controls remain robust, auditable, and practical throughout change.
Key Responsibilities:
- Lead/advise on ISO 27001 compliance and improvement activities, including: ISMS design/refresh, control mapping, risk treatment, SoA updates, and audit readiness.
- Support broader standards alignment where required (e.g., CAF and related assurance expectations).
- Provide governance and assurance across a secure on-prem cloud / data centre environment, ensuring controls are: clearly defined, operationalised, evidenced, and continuously improved.
- Drive ISO-led transformation: align security controls to changing operating models, ensuring compliance remains achievable during organisational change.
- Develop and maintain information security policies, processes and procedures, including ownership, adoption, and training/awareness where needed.
- Run/control security assurance activities (control testing, evidence packs, internal audits, nonconformity remediation, improvement plans).
- Engage senior stakeholders to articulate risk, compliance posture, and options under constraints (budget reductions, transformation impacts, changing delivery models).
- Support and/or compensate for temporary capacity gaps in information governance (as needed), ensuring BAU compliance obligations remain covered.
- Advise on AI / information governance requirements, including: Safe use of corporate AI tools, Retention/audit needs (e.g., capture/record-keeping requirements), Guidance for staff on handling sensitive data in AI-enabled workflows.
Required Skills & Experience:
- Active MoD DV clearance (essential).
- Demonstrable track record delivering ISO 2701 compliance in complex, regulated organisations.
- Experience delivering ISO transformation programmes (not just maintaining BAU compliance).
- Strong background in public sector transformation (operating model change, governance redesign, constrained budgets, assurance under change).
- Excellent knowledge of information security governance and assurance: policies, standards, risk management, audit, evidence-based compliance.
- Comfortable working with technical teams supporting secure infrastructure environments (on-prem, data centre, private cloud) while remaining focused on governance/assurance outcomes.
- Ability to communicate clearly with both technical and non-technical stakeholders, including directors/senior leadership.
- Exposure to environments with high assurance expectations and client-driven compliance requirements.
- Experience with secure compute / HPC / supercomputing environments (helpful but not required).
- Familiarity with Cyber Essentials and supporting accreditation readiness alongside ISO work.
- Knowledge of data retention / records management considerations in regulated settings.
- Updated ISMS artefacts (SoA, risk register, policies/standards, control ownership).
- Audit-ready evidence packs; internal audit findings and remediation plans.
- Operating model-to-controls mapping and compliance impact assessments during transformation.
- Pragmatic guidance and governance for AI tool usage and retention/audit requirements.
MoD-DV ISO Security Advisor employer: IO Associates
Join a leading engineering organisation that values innovation and excellence, offering a dynamic work culture where your contributions directly impact high-performance solutions in safety-critical environments. With a strong focus on employee growth, you will have the opportunity to mentor fellow engineers and shape technical direction while working in an Agile/SAFe environment. Located in the UK, this role provides a unique chance to be part of cutting-edge projects in defence, aerospace, and industrial technology, ensuring a rewarding and meaningful career path.
StudySmarter Expert Advice🤫
We think this is how you could land MoD-DV ISO Security Advisor
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like IO Associates looking for candidates who are engaged and informed.
We think you need these skills to ace MoD-DV ISO Security Advisor
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at IO Associates. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at IO Associates
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with IO Associates’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
