Cyber Security and Digital Resilience Lead – KTP Associate

Aston University; Birmingham; Hybrid; GBP 37,000 - 45,000; Full time

Benefits offered by this job

4 Day Working Week

£2000 per annum for development

Annual leave 26 days

Mentorship program

Job summary

Aston University is partnering with G&O Springs for a Knowledge Transfer Partnership focused on cyber security and governance. The role develops in-house capabilities to meet ISO 27001 and NIST 800-171, spanning office and manufacturing environments.

You will work with senior leaders to map data flows, implement controls and embed risk management across complex digital and operational systems, supporting UK and US defence markets.

Qualifications

• Master’s degree in information security, cyber security, or a closely related discipline is essential.
• Strong theoretical knowledge and practical understanding of secure systems, risk management and cyber resilience.
• Experience with policy development, quality assurance and gap analysis against information security frameworks.

Responsibilities

• Develop and embed an in-house cyber security compliance capability within a live aerospace and defence SME.
• Map information flows, design controls and governance routines to pursue defence and aerospace opportunities.
• Collaborate with senior management, IT, engineering and production across locations.

Skills

Information security

Cyber security

Policy development

Risk management

Stakeholder engagement

Project management

Data analysis

Education

Master’s degree in Information Security

Tools

ISO 27001

NIST SP 800-171

Job description

Location:Hybrid working – primarily based at G&O Springs Ltd, Broad Ground Road, Lakeside, Redditch, Worcestershire, B98 8YP

ContractType:Fixed Term (24 months)

Basis:Full Time

ClosingDate:23.59 hours BST on Sunday 11 October 2026

InterviewDate:Monday 02 November 2026

About the Role:

The successful applicant on this Knowledge Transfer Partnership (KTP) project will develop and embed an in-house cyber security compliance capability at G&O Springs, equipping the business to meet NIST SP 800-171, CMMC readiness requirements and ISO 27001 expectations across both office and factory environments.

You will work within G&O Springs, collaborating with senior management, IT, engineering and production teams to map information flows, design priority controls, and build the governance routines the business needs to pursue US & UK defence and aerospace supply-chain opportunities.

What you will gain:

Develop and implement advanced cybersecurity and digital resilience frameworks (including ISO 27001 and NIST 800-171) within a live aerospace and defence manufacturing environment

Gain hands-on experience embedding governance, risk management, incidentresponseand continuous improvement processes across complex digital and operational systems

Work within a high-growth SME supplying major aerospace and defence organisations, contributing to strategic capability development and market expansion

Contribute to establishing a permanent in-house cybersecurity capability that supports access to high-value, security-critical programmes and international markets

Collaborate closely with leading experts from Aston University and the Manufacturing Technology Centre,benefitingfrom academic supervision and industry mentoring

This KTP offers a unique opportunity for an individual keen to lead and deliver strategic business change. You will work closely with senior University academics and company leadership to apply cutting-edge cybersecurity and digital resilience practices, embedding them into real-world operations to drive sustainable growth and long-term competitive advantage.

What we are looking for:

Skills/ experience requiredfor this exciting roleinclude:

Essential

• A minimum master’s degree in information security, Cyber Security, or a closely relateddiscipline.
• Demonstratableadvanced theoretical knowledge and practicalunderstanding of secure systems, risk management, and cyber resilience.
• Strong analytical and research capability, supported by effective project management and stakeholder engagement skills.
• Proven competence in policy development, quality assurance, process mapping, and gap analysis against recognised information security frameworks (including ISO 27001 and NIST).
• Experience within an industrial setting or with policy/process development in compliance-focused environments is highly desirable.

Desirable:

• Relevant professional certifications or accreditations in cyber security, information security, risk, governance, compliance, or change management (e.g. CISM, CISSP, ISO 27001 Implementer, or equivalent).
• Experience withOperational Technology/Manufacturingand Cyber security.
• Attributes:
• Analytical thinker who can solve complex problems
• Able to articulate business and technical problems, logical solutions and impactful outcomes
• Team player who works productively across locations and disciplines
• Adaptable and comfortable in a hybrid work setting (office-based with travel)
• Proactive learner who makes the most of development opportunities
• Communicates well with both technical and non-technical stakeholders

Additional Benefitsand support:

• £2000 per annumfor personal and professional development for the duration of the project
• Annual leave (26daysp/a)
• 4 Day Working Week (Monday to Thursday)hybrid working arrangement
• Professional support and mentorship
• Mental Health and wellbeing support: https://www.aston.ac.uk/staff-public/hr/Benefits-and-Rewards/health-wellbeing

£41,000 per annum. Contract Type: Fixed Term (24 months)