SOW: Security by Design Consultant

Description

SOW: Security by Design Consultant - ref 1890

Location: Yeovil (1-2 days per week onsite initially)

Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)

Rate: 87.10ph LTD (Outside IR35)

- Active SC required

Role details:

We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.

Role Details:

Contract Statement of Work comprising 60 working daysWeekly stand-ups requiredActive Security Check (SC) clearance is essential

Key Responsibilities:

Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycleDefine the systems and services within scope, including the security perimeter and reliance scopeDocument codes of connection for systems and services accessing external customer data sourcesIdentify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plansProvide estimates relating to the time, cost and complexity of closing identified security gapsBuild effective relationships with key programme and security stakeholdersShare information management knowledge across the security and wider programme teamsDeliver high-quality outputs independently, making sound decisions based on available information

Job Requirements:

Significant experience delivering cyber security outcomes within a defence-related environmentProven experience producing detailed Security Management PlansStrong understanding of governance and risk management within a defence aviation supplier contextExperience with MOD accreditation and secure-by-design processes, including ISN2023/09Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26Technical knowledge of enterprise IT and application-level security considerationsAbility to develop, evaluate and analyse cyber security design constraints and detailed system security designs

Qualifications and Skills:

Degree or master's degree in cyber security, systems engineering, software engineering or a comparable disciplineRecognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalentExcellent written and verbal communication skills when engaging with internal teams and customersStrong consulting, stakeholder management and relationship-building abilitiesAbility to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes

If you are an experienced Cyber Security Consultant with expertise in security management, Defence standards and secure-by-design principles, apply now to support this important aviation and defence programme.

Ad ID: 5419327541