Operations and Assurance Security Manager (Contract)

SiXworks; Farnborough; On-site; GBP 90,000 - 120,000; Full time

Job summary

SiXworks is seeking an Operations & Assurance Security Manager to develop and maintain information security, risk management, and compliance across Defence and National Security programs. You will drive the security governance framework, coordinate audits, and ensure incidents are resolved with continuous improvement across the lifecycle.

The role requires leadership in security resource management and collaboration with IT, operations, and legal teams.

Qualifications

• Develop and implement information security, risk management, and compliance frameworks.
• Lead security governance and ensure protection of IT systems, networks, and data.
• Coordinate internal and external audits and assurance reporting.

Responsibilities

• Develop, implement, and maintain security policies, standards, and procedures.
• Oversee cybersecurity strategy and incident response activities.
• Manage risk across contracts and ensure compliance with regulatory requirements.
• Provide assurance reporting to senior management and stakeholders.

Skills

Security management

Cybersecurity

Risk management

Compliance

Audits

Stakeholder mgmt

Tools

ISO 27001

NIST

Job description

Work on Technology That Protects What Matters

AtSiXworks, we build secure digital solutions that supportDefence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

We’re looking for a Operations & Assurance Security Manage r who enjoys solving difficult technical challenges and wants their work to have real operational impact.

What You’ll Do

As a Operations & Assurance Security Manager, you’ll be responsible for developing, implementing, and maintaining information security, risk management, and compliance frameworks. This role ensures that systems, processes, and data are protected against threats while meeting regulatory and corporate governance requirements.

Your work may include:

Security Management

• Set direction for the development ofsecurity policies, standards, and procedures
• Oversee cybersecurity strategy and ensure protection of IT systems, networks, and data
• Support security incidents and lead incident response and remediation activities.
• Ensurer​reg​ular vulnerability assessments and penetration testing is carried out in line with system lifecycle management and continuous monitoring
• Ensure alignment with industry standards such as ISO 27001, Cyber Essentials, JSP 453 and JSP 440 Secure by Design
• Drive continuous improvement of the security programme, identifying gaps, emerging risks, and opportunities for enhancement.
• Manage and cohere security resource
• Ensure security resource is suitably qualified and experienced for the tasks and roles they are assigned

Risk & Assurance

• Manage security and operational risks across the contract
• EnsureSecure by Design and JSP 453 evidence packs are developed, maintained and remain current throughout the product's lifecycle
• Lead internal and external audits, ensuring compliance with regulatory requirements
• Provide assurance reporting to senior management and stakeholders

Compliance & Governance

• Ensure compliance with relevant legislation (e.g., GDPR, Data Protection Act)
• Develop governance frameworks and monitor adherence across the contract
• Work with legal and regulatory bodies on compliance matters
  

Stakeholder Engagement

• Collaborate with IT, operations, and business teams to embed security practices
• Provide training and awareness programs to promote a security-first culture
• Act as the primary point of contact for security and assurance-related matters
• Manage relationships with external partners, vendors and auditors.
• Overall management and coherence and stakeholder management.

Performance & Reporting

• Produce regular reports on security posture, risks, and compliance status
• Support business continuity and disaster recovery planning

About SiXworks

SiXworks is a specialist digital innovation partner deliveringsecure, mission-critical technologyto Defence and National Security organisations. We focus ondigital experimentation, secure-by-design architecture, cloud technologies, and rapid application developmentto help our customers move faster and stay ahead of evolving challenges.

Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.

Why Join Us

Our culture is guided by six principles:Agility, Security, Innovation, Quality, Collaboration and InclusivityourNorth Starfor how we work. SiXworksis a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fastcutting-edgetechnology solutions deployed in highly secure environments.

As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.

A word on UK Security Clearance

Due to the secure nature of the positionand working environment, you must have or be eligible to obtainSecurity Clearance.More details relating to UK Security Clearance can be found here:

United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk)