Job Description

Location: Gloucester (minimum of 2 days per week onsite)

Duration: 6 month initial contract OR permanent

(Inside IR35)

Role
Our client, a leader in the Defence & Security sector, is seeking a Lead System Security Engineer with eDV Clearance to join their team in Gloucester. This role is available as both a permanent position and on a contract basis, with a requirement to work on-site for at least two days per week.

• Ensure programme information assets are protected through policy, procedural, and technical enhancements.
• Act as a trusted advisor to the programme to ensure industry best practice and customer security requirements are met.
• Lead small consultancy engagements and provide clear, evidence-based reports.
• Formulate, record, and manage risk effectively.
• Decompose security requirements and understand their implications.
• Implement Information Assurance (IA) measures to protect and defend information systems.
• Apply knowledge of security architecture, PERSEC (personal security), and Cyber Security principles.

• Forward facing (used to talking to/chairing meetings with customers at a senior level)
• Understanding of formulating, recording and managing risk
• Understands security requirements and how to decompose them
• Knowledge of Information Assurance (IA) processes and procedures
• Understanding/experience of Secure by Design
• Understanding/experience of waterfall and agile methodologies
• Understanding how obsolescence impacts Information Assurance
• Supporting the development of Risk Management Framework documents and controls

• Worked with MOD or other similar agencies
• Experience/understanding of Cryptography including processes and procedures
• Experience of assessment of systems in a non-standard environment
• Experience of being on a Bid team
• Understanding of simulated environments (eg actual vs dummy datasets)
• Working knowledge of ISO 27001 or equivalent standards
• Working knowledge of NIST Risk Management Framework
• Hold a current professional Information Security certification or qualification (e.g. CISSP, CISM, CRISC, BCS CITP)
• DV clearance, or the willingness and ability to become DV cleared
• Ability to work within a fast-paced environment
• Demonstrable knowledge of HMG Security Policy Framework, ISO 27001 and NIST Risk Management Framework.

• Opportunity to work in a fast-paced and dynamic environment.
• Professional development and training opportunities.
• Access to a comprehensive employee benefits package.

If you have experience in systems engineering and information security and hold a current eDV clearance, we would love to hear from you. Apply now to join our client's team in Gloucester.