Defence Cyber Certification and Cyber Essentials Assessor

Defence Cyber Certification & Cyber Essentials Assessor Location: Glasgow, UK Salary: Competitive salary Contract: Full-time, permanent Security Clearance: Must be eligible for SC clearance. Existing SC clearance is preferred. About ID Cyber Solutions ID Cyber Solutions Ltd is a UK cyber security training centre and Certification Body. We help organisations demonstrate that they meet recognised cyber security standards, from Cyber Essentials through to the Ministry of Defence's Defence Cyber Certification (DCC). We're growing our assessment team and are looking for experienced assessors to work with organisations of all sizes — from SMEs completing their first certification through to established defence primes. The Role As a Defence Cyber Certification & Cyber Essentials Assessor, you'll carry out assessments across two key schemes:

• Defence Cyber Certification (DCC) – assessing organisations against the controls set out in Def Stan 05-138, at the relevant DCC level.
• Cyber Essentials – reviewing and marking Cyber Essentials self-assessment submissions. You'll be a trusted and independent voice for our clients. You'll need to be rigorous when reviewing evidence, while also being practical and constructive when explaining findings and helping organisations understand what they need to do. What You'll Do Defence Cyber Certification You'll:
• Plan and carry out DCC assessments, both remotely and on site, in line with scheme requirements and our internal processes.
• Review policies, procedures and technical evidence against the Def Stan 05-138 control set and relevant risk profile.
• Interview stakeholders at all levels, from IT teams through to senior management and the board, to confirm that security controls are actually being implemented — not just documented.
• Keep up to date with changes to the DCC scheme, MOD policies and the wider cyber threat landscape. Cyber Essentials You'll:
• Review and mark Cyber Essentials self-assessment submissions against the current NCSC technical requirements.
• Provide practical guidance to applicants on scope, remediation and resubmission. Across Both Schemes You'll also:
• Produce clear, objective and evidence-based assessment reports and certification decisions.
• Explain non-conformities and remediation requirements in a constructive and professional way, while maintaining your independence as an assessor.
• Maintain accurate assessment records and follow IASME, NCSC and scheme quality and audit requirements.
• Contribute to the development of our internal assessment methods, templates and assessor guidance. What You'll Bring Essential
• IASME Cyber Essentials and Cyber Essentials Plus Assessor qualifications. If you don't have these yet, we'll fund the required training and certification.
• An existing DCC Assessor qualification, or the willingness to complete it. We'll fund the required training.
• IASME Cyber Assurance Assessor status.
• Hands-on experience of assessing or auditing cyber security, ideally including Cyber Essentials, ISO/IEC 27001, the Cyber Assessment Framework (CAF) or a similar standard.
• Good working knowledge of Def Stan 05-138, MOD Cyber Risk Profiles and the Cyber Essentials technical requirements.
• A solid technical understanding of enterprise IT environments, including:
• Networks
• Cloud services such as Microsoft 365, Azure and AWS
• Identity and access management
• Endpoint security
• Vulnerability management
• Logging and monitoring
• Incident response
• Excellent written English and the ability to produce clear, accurate and defensible assessment reports.
• Confident communication skills, with the ability to work effectively with both technical and non-technical audiences.
• Eligibility for SC security clearance, which normally requires five or more years of UK residency. Desirable It would be beneficial if you also have:
• Experience working for an accredited Certification Body or within a UKAS-accredited environment.
• Additional professional certifications, such as:
• ISO 27001 Lead Auditor
• CISSP
• CISM
• CCP
• CREST
• Experience working within defence, government or critical national infrastructure. What We Offer
• Competitive salary.
• 20 days' annual leave plus bank holidays.
• Funded training, professional certifications and professional membership.
• Flexible and hybrid working.
• The opportunity to help strengthen the security of UK organisations and the UK defence supply chain.
• The opportunity to work with organisations ranging from growing SMEs to major defence organisations.

Due to the nature of this role, successful candidates will need to meet the requirements for National Security Vetting.