Security Risk Manager

Overview

In this Security Risk Manager role, you will help transform the British Army’s collective training by managing security risks across OMNIA’s programmes. You’ll work within a high-impact, cross-functional environment, reporting through the Design Branch and Engineering Management to ensure information assurance and cyber security controls meet MoD standards. You’ll engage with suppliers, partners, and stakeholders to drive secure-by-design outcomes for the Collective Training Transformation Programme. This is a mission-driven role focused on safeguarding training systems while enabling delivery and innovation.

Pay / Benefits

• strong benefits package
• ongoing development opportunities
• clear pathways to progress
• inclusive, high-performing team culture

Responsibilities

• Input, manage and disseminate security risks across OMNIA and report to stakeholders per the governance model (MoD Secure by Design aligned)
• Support Information Assurance (IA) with MoD Secure by Design implementation
• Maintain artefacts: Security Risk Management Plan, Security Risk Register, Key Security Risk Indicators
• Support artefact development for IA compliance against MoD assurance (NIST 800-30/37/53)
• Support IA engagements with partners/suppliers and Authority representatives
• Contribute to Security Working Groups and stakeholder forums

Key requirements

• Sound experience of Security Risk Management
• Strong knowledge of Information Assurance and Cyber Security principles
• Ability to work autonomously in a fast-paced environment
• Good communication and collaboration skills
• Willingness and ability to travel within the UK
• Security cleared or eligible for SC or above
• Experience with MoD Secure by Design framework

• Strong communication (oral, written, presentations)
• Team player with ability to work in matrix organisations
• Organised, proactive, problem-solver
• Knowledge of Information Assurance and Cyber Security frameworks
• Understanding of MoD standards and policies
• Familiarity with NIST 800-30/37/53 and related assurance processes

…