Head of Product Security

TN United Kingdom; Luton; On-site; GBP 45,000 - 75,000; Full time

Job summary

An established industry player in electronic warfare seeks a security risk management expert to develop and implement robust systems for high-integrity electronics. This role involves ensuring compliance with UK and NATO standards while delivering training and presentations to enhance product security. With a rich heritage and commitment to innovation, the company offers a collaborative environment where your contributions will directly impact military technology advancements. Join a team dedicated to excellence and security in defense technologies, with opportunities for professional growth and flexible working arrangements.

Qualifications

• Hands-on experience in developing security risk management systems.
• Knowledge of UK/NATO Information Assurance standards and procedures.

Responsibilities

• Develop robust security risk management systems for high-integrity electronics.
• Deliver training courses and presentations on product security.

Skills

Security risk management systems

Legislation familiarity (IPA, DPA, Official Secrets Act)

NCSC Certified Professional

UK/NATO Information Assurance standards

Incident investigation principles

NCSC security evaluation techniques

Cryptography technologies

Training and awareness presentations

Communication and interpersonal skills

SC clearance ability

Education

Relevant security qualification

Job description

Social network you want to login/join with:

1. Has hands-on experience of developing robust security risk management systems for complex high-integrity electronics systems in accordance with customer, regulatory, and legislative expectations.
2. Familiarity with legislation – e.g., IPA, DPA, Official Secrets Act;
3. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognized qualification.
4. Knowledge of UK/NATO Information Assurance standards, procedures & systems, including HMG Security Policy Framework, ISO security standards, DO326A.
5. Familiarity with the principles of incident investigation and knowledge of how to implement an investigation process;
6. Practical experience of NCSC and Common Criteria security evaluation techniques and requirements up to High Grade.
7. Knowledge of current cryptography technologies, Key Management Systems, & practical COMSEC implementations.
8. Experience in delivering training courses within a company and providing awareness presentations to other groups; worked with others to identify future Product Security needs of the company.
9. Awareness of product security implications relating to safety;
10. Excellent communication and interpersonal skills, with the ability to interact with subject matter experts on a wide range of technical and operational topics.
11. Ability to obtain SC clearance; UK-eyes only caveat.

It would be advantageous if you have:

1. A strong background in design and implementation of high-integrity complex electronics, such as software design to DO178C level C, complex electronics hardware up to DO254 Level.
2. Good understanding and experience in delivering and maintaining products to meet regulatory requirements, e.g., MAA DAOS, ARP4754.
3. Understanding of the concept of operations for products to comprehend functional security risks and define/agree on appropriate mitigations;
4. Ability to identify and deliver alternative/innovative security management methods, including securing buy-in from key regulatory bodies;
5. Understanding of the role of advisory boards within the UK Government or NATO for security.
6. Active membership of an external security specialist group or forum.
7. Ability to obtain DV clearance.

Why Leonardo?

The business, primarily based in Luton, has a rich heritage in Electronic Warfare with over 100 years of history, providing the latest advances in radio frequency technology to UK and international military customers.

Under a strategic partnering arrangement (SPA) with the Royal Air Force, Ministry of Defence’s Defence Equipment & Support (DE&S), and Defence Science and Technology Laboratory (DSTL), Leonardo leads efforts to provide value-for-money defensive equipment for military aircraft fleets, boosting export opportunities and UK prosperity.

Leonardo leads the consortium responsible for the Praetorian Defensive Aids Sub-System (DASS) on the Eurofighter Typhoon, and developed the BriteCloud expendable active decoy, a significant advance in radar-guided missile countermeasures.

The Future Combat Air program involves Leonardo as a key partner in Team Tempest, working to develop technologies for a new combat air system expected to enter service by 2035. Recent UK MOD contracts further support this development.

To learn about our company benefits, please visit our website.

Given the nature of the work, some on-site working is expected, with flexible arrangements available.

Security Clearance

You must be eligible for full security clearance. For more information, please visit:

Diversity Statement

We are committed to inclusion and diversity, welcoming applications from all walks of life as we strive to create a balanced, stronger team.