SOW: Security by Design Consultant - ref 1890
Location: Yeovil (1-2 days per week onsite initially)
Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)
Rate: £87.10ph LTD (Outside IR35)
Role details:
We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.
Role Details:
Contract Statement of Work comprising 60 working days
Weekly stand-ups required
Active Security Check (SC) clearance is essential
Key Responsibilities:
Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycle
Define the systems and services within scope, including the security perimeter and reliance scope
Document codes of connection for systems and services accessing external customer data sources
Identify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plans
Provide estimates relating to the time, cost and complexity of closing identified security gaps
Build effective relationships with key programme and security stakeholders
Share information management knowledge across the security and wider programme teams
Deliver high-quality outputs independently, making sound decisions based on available information
Job Requirements:
Significant experience delivering cyber security outcomes within a defence-related environment
Proven experience producing detailed Security Management Plans
Strong understanding of governance and risk management within a defence aviation supplier context
Experience with MOD accreditation and secure-by-design processes, including ISN2023/09
Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53
Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26
Technical knowledge of enterprise IT and application-level security considerations
Ability to develop, evaluate and analyse cyber security design constraints and detailed system security designs
Qualifications and Skills:
Degree or master's degree in cyber security, systems engineering, software engineering or a comparable discipline
Recognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalent
Excellent written and verbal communication skills when engaging with internal teams and customers
Strong consulting, stakeholder management and relationship-building abilities
Ability to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes
If you are an experienced Cyber Security Consultant with expertise in security management, Defence standards and secure-by-design principles, apply now to support this important aviation and defence programme
