SOW: Security by Design Consultant

Description

SOW: Security by Design Consultant - ref 1890

Location: Yeovil (1-2 days per week onsite initially)

Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)

Rate: £87.10ph LTD (Outside IR35)

- Active SC required

Role details:

We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.

Role Details:

Contract Statement of Work comprising 60 working days

Weekly stand-ups required

Active Security Check (SC) clearance is essential

Key Responsibilities:

Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycle

Define the systems and services within scope, including the security perimeter and reliance scope

Document codes of connection for systems and services accessing external customer data sources

Identify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plans

Provide estimates relating to the time, cost and complexity of closing identified security gaps

Build effective relationships with key programme and security stakeholders

Share information management knowledge across the security and wider programme teams

Deliver high-quality outputs independently, making sound decisions based on available information

Job Requirements:

Significant experience delivering cyber security outcomes within a defence-related environment

Proven experience producing detailed Security Management Plans

Strong understanding of governance and risk management within a defence aviation supplier context

Experience with MOD accreditation and secure-by-design processes, including ISN2023/09

Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53

Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26

Technical knowledge of enterprise IT and application-level security considerations

Ability to develop, evaluate and analyse cyber security design constraints and detailed xjnqpsq system security designs

Qualifications and Skills:

Degree or master's degree in cyber security, systems engineering, software engineering or a comparable discipline

Recognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalent

Excellent written and verbal communication skills when engaging with internal teams and customers

Strong consulting, stakeholder management and relationship-building abilities

Ability to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes

If you are an experienced Cyber Security Consultant with expertise in security management, Defence standards and secure-by-design principles, apply now to support this important aviation and defence programme

Ad ID: 5419328721