Overview
As Security Manager for the ILT-A Programme, you will lead security governance, risk and compliance across the project lifecycle. You will ensure Defence Standard 05-139 and MOD requirements are implemented, protecting personnel, information, assets and operations. You will support governance, planning and delivery, with a clear pathway into Programme Management in a complex defence setting. This is a chance to shape secure programme delivery within a growing defence program and work with cross-functional teams.
Responsibilities
- Act as the programme focal point for Security Management across the ILT-A portfolio
- Develop and maintain security arrangements per Defence Standard 05-139 and customer requirements
- Maintain programme security risk registers and monitor treatment plans
- Lead security assurance activities and coordinate evidence for compliance
- Provide security advice to Programme Leadership and project teams
- Support security reviews, audits, inspections and customer assurance
- Maintain governance for Information, Cyber, Personnel and Physical Security
- Lead security risk management throughout planning, delivery and operations
- Support security accreditation and approval activities as required
- Embed security considerations in design, build, integration, testing and operations
- Fulfil Cyber/Information Security Officer duties for designated programmes
- Maintain alignment with ISO27001, NIST, CAF, Cyber Essentials Plus and Secure by Design
- Support incident, vulnerability management and investigations
- Oversee supplier and contract security and ensure subcontractors comply with obligations
- Support programme delivery planning, scheduling and governance reporting
- Assist with resource planning, budgeting and forecasting
- Contribute to integrated schedules using Primavera P6 and other tools
- Drive continuous improvement in delivery and security functions
Key requirements
- Demonstrable security management experience in Defence, Aerospace or other highly regulated environments
- Experience implementing Security Governance, Risk and Compliance frameworks
- Strong understanding of Defence Standard 05-139 Security Risk Management
- Experience supporting security assurance, audits and accreditation
- Knowledge of MOD protective security requirements and contractual obligations
- Experience managing security risk registers and treatment plans
- Knowledge of ISO27001, NIST, Cyber Essentials and CAF
- Experience advising on security to programme, project and engineering teams
- Strong stakeholder management with customers, suppliers and assurance authorities
- Experience producing governance materials and reports
- Understanding of programme and project management principles
- Stakeholder management
- Analytical thinking
- Clear communication and advisory skills
- Security Governance, Risk and Compliance implementation
- Defence Standard 05-139 Knowledge
- ISO27001 / NIST / CAF / Cyber Essentials familiarity
…
