Information Security & Assurance Officer

<p class="text-muted mb-3">The Geotechnical Sub Alliance (GSA) is at the forefront of the Sizewell C nuclear power station development - one of the UK’s largest and most exciting infrastructure programmes.</p>

<p class="text-muted mb-3">We’re responsible for preparing the foundations of the entire site: designing and constructing cut‑off walls, retaining structures, soil improvements and more. Using advanced geotechnical engineering and world‑class construction technologies,</p>

<p class="text-muted mb-3">this is a rare opportunity to contribute to a national project that will shape the UK’s clean‑energy future.</p>

<p class="text-muted mb-3">The Role</p>

<p class="text-muted mb-3">The Information Security & Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber‑security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies.</p>

<p class="text-muted mb-3">The role provides assurance across corporate and project systems, oversees integration with client security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation.</p>

<p class="text-muted mb-3">What You'll Be Doing</p>

<p class="text-muted mb-3">Governance & Compliance: Implement and enforce client ISMP</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements across GSA, including security assurance levels, export control, information classification and data‑handling rules. Maintain governance documentation, audit evidence and subcontractor security flow‑downs, and support client, partner and third‑party security reviews.</h5>

<p class="text-muted mb-3">Security Assurance & ISMS Ownership: Own and operate the ISMS, including policies, standards and procedures. Complete and manage required security and privacy assessments (e.g. TPSA, SRA, DPIA, ECIA), track remediation actions, review suppliers, and ensure alignment with UK GDPR, DPA 2018, NIS2 (where applicable) and sector‑specific standards.</p>

<p class="text-muted mb-3">O365 & Technical Security Oversight: Provide assurance over O365 and core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations.</p>

<p class="text-muted mb-3">SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security service providers. Lead or support incident response, root‑cause analysis and post‑incident reviews.</p>

<p class="text-muted mb-3">Stakeholder Engagement & Awareness: Act as a trusted adviser to IT, project teams and business units, translating technical risk into clear business impact. Deliver security awareness initiatives, phishing simulations and ongoing engagement with suppliers, auditors, MSSPs and SOC partners.</p>

<p class="text-muted mb-3">Continuous Improvement: Identify opportunities to optimise and automate security controls, contribute to the cyber‑security roadmap and maintain awareness of emerging threats, technologies and industry best practice.</p>

<p class="text-muted mb-3">You will promote company and client values and support a positive safety and security culture across all activities.</p>

<p class="text-muted mb-3">What We’re Looking For</p>

<p class="text-muted mb-3">Essential</p>

<p class="text-muted mb-3">Demonstrable experience in information security assurance and technical cyber‑security operations within a UK organisation</p>

<p class="text-muted mb-3">Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR / DPA 2018</p>

<p class="text-muted mb-3">Hands‑on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management tools</p>

<p class="text-muted mb-3">Experience leading or supporting security incident response, root‑cause analysis and post‑incident reviews, including working with SOC teams (internal or MSSP)</p>

<p class="text-muted mb-3">Ability to produce clear assurance reports, security documentation and executive‑level dashboards</p>

<p class="text-muted mb-3">Strong stakeholder management skills, with the ability to translate technical risk into pragmatic business actions</p>

<p class="text-muted mb-3">Desirable</p>

<p class="text-muted mb-3">Degree (or equivalent experience) in computer science, cyber security or a related discipline</p>

<p class="text-muted mb-3">Familiarity with SANS Top 20 Critical Security Controls and UK Cyber Essentials</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements</h5>

<p class="text-muted mb-3">Experience operating in complex, regulated or safety‑critical environments</p>

<p class="text-muted mb-3">Why Bachy Soletanche?</p>

<p class="text-muted mb-3">When you join the world’s largest specialist geotechnical contractor, you’re part of an international community of over 10,000 experts, based in 31 countries around the world. You’ll have the opportunity to contribute to prestigious, ground-breaking projects, using the very latest tools and technology to solve complex problems, constantly learn new skills and take your career in any direction.</p>

<p class="text-muted mb-3">As well as being part of a landmark project and working in a collaborative alliance environment, we offer:</p>

<p class="text-muted mb-3">Discretionary annual bonus (based on personal/project performance)</p>

<p class="text-muted mb-3">Salary Sacrifice Pension Scheme (min. 5% company contribution)</p>

<p class="text-muted mb-3">Enhanced Sick Pay (after probation)</p>

<p class="text-muted mb-3">Income Protection, Private Medical Insurance and Life Assurance</p>

<p class="text-muted mb-3">Employee Assistance Programme</p>

<p class="text-muted mb-3">25-days annual leave + Bank Holidays per year (increasing with service)</p>

<p class="text-muted mb-3">Option to purchase additional annual leave</p>

<p class="text-muted mb-3">Paid annual professional memberships</p>

<p class="text-muted mb-3">Volunteering days</p>

<p class="text-muted mb-3">Professional growth and development</p>

<p class="text-muted mb-3">Bachy Soletanche is committed to equal opportunities in employment with the aim of ensuring that everyone who applies to work for us receives fair treatment. We positively encourage applications from suitably qualified and eligible candidates regardless of age, disability, ethnicity, sex, gender identity, sexual orientation, religion or belief and pregnancy/maternity</p>