Security Consultant
On-siteFarnborough, England, United Kingdom
Job Summary
Design, build, and deliver secure digital solutions within Defence and National Security environments by providing strategic security governance, risk, and compliance direction. Engage with stakeholders across the MOD to identify security objectives and collaborate with engineering teams to achieve security outcomes. Conduct risk assessments using industry-approved methodologies like NIST and ISO 27005, producing actionable treatment plans and documentation including risk management plans and security policies. Translate technical risks into business language for senior decision-makers while supporting compliance activities such as audits and control testing. Requires UK Security Clearance and experience with Agile, DevSecOps, and MOD policies. SiXworks specializes in secure-by-design architecture and rapid application development for mission-critical technology.
Required Qualifications
- Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005)
- Producing clear, actionable risk treatment plans aligned to security objectives to treat /mitigate the identified risks
- Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering
- Creation of security documentation to support the development of an information system, these could include: Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results
- Ability to translate technical security risks into business language for senior stakeholders and decision-makers
- High standards in written report and/or design documentation
- You must have or be eligible to obtain Security Clearance
Desired Qualifications
- Knowledge of MOD policies (JSP 440, 453/604, 892)
- Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments
- Relevant certifications (e.g., CISSP, ChCSP, etc)
- Experience of working with MOD Cyber Assurance/Accreditors
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.