Operations and Assurance Security Manager

IBM SiXworks; Farnborough; On-site; GBP 90,000 - 130,000; Full time

Job summary

SiXworks in the United Kingdom is seeking an Operations & Assurance Security Manager to lead information security, risk management, and compliance across defence-focused projects.

You will drive policies, oversee cybersecurity strategy, coordinate audits, and ensure Secure by Design practices while maintaining regulatory governance. Security clearance is required or eligible.

Qualifications

• Requires experience building security policies, standards and procedures.
• Experience overseeing cybersecurity strategy and IT security controls.
• Strong knowledge of GDPR, data protection, and governance frameworks.

Responsibilities

• Set direction for security policies, standards, and procedures.
• Oversee security strategy and protection of IT systems, networks, and data.
• Lead incident response and remediation activities.
• Coordinate regular vulnerability assessments and penetration testing.
• Ensure compliance with ISO 27001, Cyber Essentials, JSP 453 and JSP 440.

Skills

Security management

Policy development

Risk management

Incident response

Audits & compliance

Education

Bachelor's degree in CS/Engineering or related field

Job description

Work on Technology That Protects What Matters

At SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

We’re looking for a Operations & Assurance Security Manager who enjoys solving difficult technical challenges and wants their work to have real operational impact.

What You’ll Do

As a Operations & Assurance Security Manager, you’ll be responsible for developing, implementing, and maintaining information security, risk management, and compliance frameworks. This role ensures that systems, processes, and data are protected against threats while meeting regulatory and corporate governance requirements.

Your work may include:

Security Management

• Set direction for the development of security policies, standards, and procedures
• Oversee cybersecurity strategy and ensure protection of IT systems, networks, and data
• Support security incidents and lead incident response and remediation activities.
• Ensure regular vulnerability assessments and penetration testing is carried out in line with system lifecycle management and continuous monitoring
• Ensure alignment with industry standards such as ISO 27001, Cyber Essentials, JSP 453 and JSP 440 Secure by Design
• Drive continuous improvement of the security programme, identifying gaps, emerging risks, and opportunities for enhancement.
• Manage and cohere security resource
• Ensure security resource is suitably qualified and experienced for the tasks and roles they are assigned
• Manage security and operational risks across the contract
• Ensure Secure by Design and JSP 453 evidence packs are developed, maintained and remain current throughout the product's lifecycle
• Lead internal and external audits, ensuring compliance with regulatory requirements
• Provide assurance reporting to senior management and stakeholders

Compliance & Governance

• Ensure compliance with relevant legislation (e.g., GDPR, Data Protection Act)
• Develop governance frameworks and monitor adherence across the contract
• Work with legal and regulatory bodies on compliance matters

Stakeholder Engagement

• Collaborate with IT, operations, and business teams to embed security practices
• Provide training and awareness programs to promote a security-first culture
• Act as the primary point of contact for security and assurance-related matters
• Manage relationships with external partners, vendors and auditors.
• Overall management and coherence and stakeholder management.

Performance & Reporting

• Produce regular reports on security posture, risks, and compliance status
• Support business continuity and disaster recovery planning

About SiXworks

SiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.

Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.

Why Join Us

Our culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.

As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.

A word on UK Security Clearance

Due to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found here:

United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk)