Total 2 job vacancies by Experis

Role: Security Assurance Coordinator
Location: MoD Corsham - Hybrid - 3 Days Onsite
Duration: 31/03/2025
Rate: £775 - £825 P/Day - UMB - Inside IR35

Overview

The Security Governance, Risk & Compliance capability is required to deliver OpNET security risk management, implement security control measures, and documented evidence to meet OpNET assurance and compliance requirements as set by the MOD. Specifically, this means producing documentation and evidence to support:

* Cyber Defence and risk (CyDR) Secure by Design (SbD) iaw JSP 440.
* Network Operating Authority (NOA) JSP 604 Rules:
* Rule 10 - Information based capabilities shall be assured in accordance with current policy in JSP 440 Part 2 Leaflet 5C.
* Rule 11 - Defensive cyber operations assurance and cyber network defence compliance.
* Rule 16 - ICT capabilities and services shall be designed to provide a high-quality product.

Within existing NSoIT(D) governance and management structures, and following extant OpNET processes and ways of working, the following are to be delivered:

* Subject matter expertise, advice and guidance on security matters relating to CyDR Secure by Design (SbD )of MoD systems to the DC2E/SERAPHIM project staff.
* Security awareness material, briefings and Security Operating Procedures (SyOPs) as required to system users and maintainers.
* Conduct and routinely manage DC2E/SERAPHIM security risk assessments (and associated security controls using NIST 800 methodologies) and lead mitigation action.
* Integration of DC2E/SERAPHIM security controls, functions and tools with wider DD enterprise strategic security approach and solutions.
* Organise and chair a LAD(T) project Security Working Group.
* Implement security controls or all aspects of physical, procedural and personnel security related to the development and delivery of DC2E/SERAPHIM.
* Manage all aspects of 3rd party routine and annual CHECK IT health checks, Penetration Tests and vulnerability assessments, and associated remediation activities.
* Identify and communicate current and emerging security threats to the DC2E/SERAPHIM project.
* Provide solutions that balance business and operational requirements with information and cyber security requirements.
* Identify risks associated with business processes, operations, information security programs and technology projects.
* Conduct security evaluations of technical design and implementation documentation such a HLDs, LLDs and work instructions.
* Integrate and align DC2E/SERAPHIM security aspects with wider NSoIT(D) and OpNET security solutions and ways of working, including security operations functions.
* Support the LAD(T) Security Architect and LAD(T) Security Engineer to ensure that technology solutions meet SbD and risk tolerance requirements.

All Deliverables Are to Be:

* Tailored and aligned with existing OpNET Security, Risk and Compliance, and Security Operations functions.
* Agreed and coordinated with the OpNET Black/Red Security Assurance Coordinator (SAC).

Job title: DV Cleared Information Assurance and Cyber Risk
Location: Farnborough
Duration: 12 months
Rate: Up to £850 per day

My client is looking for a DV Cleared Information Assurance and Cyber Risk consultant to join their team.
Responsibilities:

• Provide security subject matter expertise to the TSM Programme Manager, technical security advice to the TSM Programme and provide support to the clients Security Assurance Co-ordinator.
• Provide security subject matter expertise on the security implications of System Change Requests (SCRs).
• Maintain knowledge of current client security requirements and provide advice to the TSM Security Manager (SyM) on security requirements.
• Identify and assess the potential impact of amendments to the clients policy on the Programme.
• Maintain accreditation or Secure by Design (SbD) of TSM systems in accordance with the security requirements in contract with the client, including liaison as tasked by the TSM SyM with the client (e.g. CyDR) and other (e.g. NCSC) security stakeholders.
• Maintain RMADS (or similar SbD artefacts) and security risk assessments for TSM systems to support accreditation.
• Maintain formal certification of the TSMF facility in support of the accreditation / SbD of TSM systems.
• Maintain relevant Codes of Connection (CoCo) and ensure continued approval for such connections.
• Review and update security operating procedures, as tasked by the TSM SyM.
• Report on security for agreed meetings, for example regular Team Leaders' meetings or Monthly or Quarterly Progress Meetings as tasked by the TSM Programme Manager.
• On behalf of the TSM SyM manage the quarterly Security Working Groups (SWG) ensuring that calling notices, agendas, minutes etc. are produced and distributed within agreed timescales.
• Produce a draft Security Report prior to the Quarterly SWGs and presenting this report at the SWG; updating and issuing this report after the SWG.
• Manage assurance activities to be completed by the TSM Security Team.
• Support compliance checking activities to be completed by the TSM Security Team.
• Provide advice on the patching of TSM systems including monitoring MODCERTS and other sources of patching and vulnerability information.
• Develop and deliver security training to the TSM Programme.

Required Skills:

• Experience in offering advice on Security requirements.
• 5-10 years Cyber Risk experience.
• Understanding codes of Connection.
• Understanding of Secure by Design and how this is replacing formal accreditation of client systems.
• Comfortable working in a multi-disciplinary team, and able to work with others.
• Able to manage own tasks and time liaising with the TSM System Security Officer to agree tasks to be delivered and time to be worked on programme.
• Good communication skills.

If this is the role for you please submit your CV at your earliest convenience. If you have not been contacted within 2 weeks of application please consider you have not been successful for this opportunity.