We're recruiting for an experienced Senior Information System Security Officer (ISSO) to support a specialist defence and security programme focused on Product Security / Information Assurance across synthetic training systems. This is a 12-month contract, working full time on site in Warton, Lancashire.
Key details
- Location: Warton (near Preston), Lancashire (on-site)
- Contract length: 12 months
- Hours: 37 hours per week (full time on site)
- IR35: Inside IR35
- Clearance: BPSS + Full SC required
- Restrictions: ITAR and UK Eyes Only
- Ref: 610205
What you'll be doing
- Supporting the ISSO team to deliver Product Security and Information Assurance compliance
- Running compliance assessments, assurance reviews, and vulnerability management activities
- Maintaining understanding of relevant security standards and applying them to engineering delivery
- Analysing findings, identifying residual / emerging risks, and recommending remediation actions
- Collaborating with engineering teams across the design, development, and delivery lifecycle
- Engaging with wider stakeholder ISSO teams (including occasional UK / international travel where required)
What we're looking for (essential)
- Strong experience in cyber security / information assurance (defence sector experience required)
- Familiarity with standards / frameworks such as:
- NIST SP 800-53
- STIGs
- Def Stan 05-138
- JSPs
- MOD Secure by Design
- Ability to communicate security risks and recommendations clearly to technical and non-technical audiences
Desirable
- Experience assuring medium to large enterprise IT or OT environments
- STEM degree (or equivalent relevant experience)
- Certifications such as CISSP or CISM
