ID Cyber Solutions
Defence Cyber Certification & Cyber Essentials Assessor
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Defence Cyber Certification & Cyber Essentials Assessor
Location: Glasgow, UK
Salary: Competitive salary
Contract: Full-time, permanent
Security Clearance: Must be eligible for SC clearance. Existing SC clearance is preferred.
About ID Cyber Solutions
ID Cyber Solutions Ltd is a UK cyber security training centre and Certification Body. We help organisations demonstrate that they meet recognised cyber security standards, from Cyber Essentials through to the Ministry of Defence's Defence Cyber Certification (DCC).
We're growing our assessment team and are looking for experienced assessors to work with organisations of all sizes — from SMEs completing their first certification through to established defence primes.
The Role
As a Defence Cyber Certification & Cyber Essentials Assessor, you'll carry out assessments across two key schemes:
- Defence Cyber Certification (DCC) – assessing organisations against the controls set out in Def Stan 05-138, at the relevant DCC level.
- Cyber Essentials – reviewing and marking Cyber Essentials self-assessment submissions.
You'll be a trusted and independent voice for our clients. You'll need to be rigorous when reviewing evidence, while also being practical and constructive when explaining findings and helping organisations understand what they need to do.
What You'll Do
Defence Cyber Certification
You'll:
- Plan and carry out DCC assessments, both remotely and on site, in line with scheme requirements and our internal processes.
- Review policies, procedures and technical evidence against the Def Stan 05-138 control set and relevant risk profile.
- Interview stakeholders at all levels, from IT teams through to senior management and the board, to confirm that security controls are actually being implemented — not just documented.
- Keep up to date with changes to the DCC scheme, MOD policies and the wider cyber threat landscape.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cyber Essentials
You'll:
- Review and mark Cyber Essentials self-assessment submissions against the current NCSC technical requirements.
- Provide practical guidance to applicants on scope, remediation and resubmission.
Across Both Schemes
You'll also:
- Produce clear, objective and evidence-based assessment reports and certification decisions.
- Explain non-conformities and remediation requirements in a constructive and professional way, while maintaining your independence as an assessor.
- Maintain accurate assessment records and follow IASME, NCSC and scheme quality and audit requirements.
- Contribute to the development of our internal assessment methods, templates and assessor guidance.
What You'll Bring
Essential
- IASME Cyber Essentials and Cyber Essentials Plus Assessor qualifications. If you don't have these yet, we'll fund the required training and certification.
- An existing DCC Assessor qualification, or the willingness to complete it. We'll fund the required training.
- IASME Cyber Assurance Assessor status.
- Hands-on experience of assessing or auditing cyber security, ideally including Cyber Essentials, ISO/IEC 27001, the Cyber Assessment Framework (CAF) or a similar standard.
- Good working knowledge of Def Stan 05-138, MOD Cyber Risk Profiles and the Cyber Essentials technical requirements.
- A solid technical understanding of enterprise IT environments, including:
- Networks
- Cloud services such as Microsoft 365, Azure and AWS
- Identity and access management
- Endpoint security
- Vulnerability management
- Logging and monitoring
- Incident response
- Excellent written English and the ability to produce clear, accurate and defensible assessment reports.
- Confident communication skills, with the ability to work effectively with both technical and non-technical audiences.
- Eligibility for SC security clearance, which normally requires five or more years of UK residency.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
It would be beneficial if you also have:
- Experience working for an accredited Certification Body or within a UKAS-accredited environment.
- Additional professional certifications, such as:
- ISO 27001 Lead Auditor
- CISSP
- CISM
- CCP
- CREST
- Experience working within defence, government or critical national infrastructure.
What We Offer
- Competitive salary.
- 20 days' annual leave plus bank holidays.
- Funded training, professional certifications and professional membership.
- Flexible and hybrid working.
- The opportunity to help strengthen the security of UK organisations and the UK defence supply chain.
- The opportunity to work with organisations ranging from growing SMEs to major defence organisations.
Equal Opportunities
ID Cyber Solutions Ltd is an equal opportunities employer. We welcome applications from people of all backgrounds and are happy to discuss reasonable adjustments at any stage of the recruitment process.
Due to the nature of this role, successful candidates will need to meet the requirements for National Security Vetting.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London