Senior GRC Operational Security Advisor

As a Senior GRC Operational Security Advisor, you’ll help shape and enhance security practices while delivering real value to our clients.

You’ll join a collaborative and supportive team within Sopra Steria’s Aerospace, Defence and Security business, working closely with stakeholders at all levels to ensure we meet regulatory, contractual and industry requirements.

You’ll play a key role in developing and implementing robust frameworks, influencing decision-making, and strengthening our cyber security posture.

With hybrid working that varies depending on project needs, you’ll have the flexibility to balance client engagement with your personal commitments.

What you'll be doing

• Support and lead security activities within client engagements, developing security control frameworks aligned to objectives and contractual obligations.
• Build strong relationships with customers and internal stakeholders through positive engagement and effective communication.
• Identify customer requirements and apply industry best practice solutions to deliver meaningful outcomes.
• Assess cyber risks, evaluate their impact, and define effective risk mitigation strategies.
• Contribute to security strategy by applying a range of technical and management principles.
• Carry out complex assessments and support audit programmes to ensure compliance with regulatory and industry standards.

What you’ll bring

• Experience delivering consultancy engagements such as Information Security Management System implementation, risk assessments and compliance audits.
• Strong understanding of governance, risk and compliance principles and frameworks.
• Ability to analyse complex problems and apply a structured, systematic approach to solutions.
• Experience presenting technical concepts clearly to both technical and non-technical audiences.
• Proven ability to make decisions that influence project outcomes and team objectives.
• Cyber or information security qualification such as Certified Information Systems Security Professional, Certified Information Security Manager, Certified Cloud Security Professional, or ISO 27001 Lead Auditor.

It would be great if you had

• Experience in cloud security implementation.
• Knowledge of Identity and Access Management.
• Exposure to Operational Technology environments.
• Understanding of security architecture principles.

If you’re interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Employment

Type: Full-time, Permanent.

Location: UK – hybrid working with variable on-site requirements depending on client and project needs.

• Security
• Clearance

Level: Must be eligible for Developed Vetting (DV).

Internal

Recruiter: Rebecca.

Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, and pension.

Although this role is advertised as full-time, we believe that flexibility at work can promote work/life balance, increase your motivation, reduce stress and improves performance and productivity.

We support different ways of working and can offer a range of flexible working arrangements.

So, if you’re interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible.

Loved reading about this job and want to know more about us?

Sopra Steria’s Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients.

The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment.

We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other.

We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.