GRC Operational Security Advisor (OSA)

Are you looking to build your career in cyber security while helping organisations manage risk and stay secure in complex environments? As a GRC Operational Security Advisor (OSA), you’ll support the development and implementation of governance, risk management and compliance frameworks within a dynamic Aerospace, Defence and Security environment. You’ll be part of a collaborative team, working across client engagements to ensure security strategies align with regulatory requirements, contractual obligations and industry best practice. This is a great opportunity to grow your hands-on experience in cyber security while contributing to meaningful work that supports national security. You’ll be supported to develop your skills, expand your knowledge and build a long-term career with us. We can offer great career progression opportunities, flexible benefits to meet your needs, and training and development opportunities. This is a hybrid role – combining home working with time on client site as required. What you'll be doing: Supporting security activities for client engagements, helping to develop and apply appropriate security control frameworks. Working with senior team members to understand customer requirements and apply industry best practice solutions. Identifying and assessing cyber risks, and contributing to the development of mitigation strategies. Supporting security assessments and audit activities to ensure ongoing compliance. Helping to implement compliance measures aligned to relevant regulations, standards and frameworks. Staying up to date with emerging cyber threats, vulnerabilities and best practices, contributing ideas for improvement. What you’ll bring: Understanding of information security governance principles and how they apply within an organisation. Familiarity with governance frameworks, risk management approaches and compliance standards. Ability to use cyber security tools, methods and analytical approaches to problem solving. Ability to absorb and apply technical information effectively. Good planning and organisational skills, with the ability to manage multiple priorities. An entry level cyber security certification or relevant academic background. It would be great if you had: Knowledge of cloud security implementation. Knowledge of identity and access management. Knowledge of operational technology environments. Understanding of security architecture principles. If you’re interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you! Employment Type: Full-time, Permanent. Location: Hybrid – home and site based. Security Clearance Level: Must be eligible for DV. Internal Recruiter: Rebecca. Salary: £30,000 – £40,000. Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, and pension. Although this role is advertised as full-time, we believe that flexibility at work can promote work/life balance, increase your motivation, reduce stress and improves performance and productivity. We support different ways of working and can offer a range of flexible working arrangements. So, if you’re interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible. Loved reading about this job and want to know more about us? Sopra Steria’s Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.