Operations & Assurance Security Manager

IBM SiXworks; Farnborough; On-site; GBP 85,000 - 110,000; Full time

Benefits offered by this job

25 days leave

Private Medical

Life Assurance

Generous pension

Bonus

Professional development

On-site gym/cafe/parking

Job summary

SiXworks is seeking an Operations & Assurance Security Manager to lead information security, risk management, and compliance across our defence-focused digital projects. You will develop policies, oversee cybersecurity strategy, and drive secure-by-design practices across the contract.

You’ll coordinate audits, manage incidents, and report to senior stakeholders while aligning with GDPR and JSP standards. The role requires strong leadership, technical insight, and the ability to work in a

Qualifications

• Experience in information security management and governance.
• Knowledge of GDPR/Data Protection Act.
• Experience coordinating audits and assurance reporting.

Responsibilities

• Develop security policies, standards, and procedures.
• Oversee cybersecurity strategy and protection of IT systems.
• Lead incident response and remediation activities.
• Coordinate vulnerability assessments and pen tests.
• Ensure compliance with GDPR and JSP standards.
• Provide assurance reporting to senior management.

Skills

Security management

Risk management

Compliance

Stakeholder engagement

Auditing

Training & awareness

Tools

ISO 27001

Job description

Work on Technology That Protects What Matters

At SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

We’re looking for a Operations & Assurance Security Manager who enjoys solving difficult technical challenges and wants their work to have real operational impact.

What You’ll Do

As a Operations & Assurance Security Manager, you’ll be responsible for developing, implementing, and maintaining information security, risk management, and compliance frameworks. This role ensures that systems, processes, and data are protected against threats while meeting regulatory and corporate governance requirements.

Your work may include:

Security Management

• Set direction for the development of security policies, standards, and procedures
• Oversee cybersecurity strategy and ensure protection of IT systems, networks, and data
• Support security incidents and lead incident response and remediation activities.
• Ensure regular vulnerability assessments and penetration testing is carried out in line with system lifecycle management and continuous monitoring
• Ensure alignment with industry standards such as ISO 27001, Cyber Essentials, JSP 453 and JSP 440 Secure by Design
• Drive continuous improvement of the security programme, identifying gaps, emerging risks, and opportunities for enhancement.
• Manage and cohere security resource
• Ensure security resource is suitably qualified and experienced for the tasks and roles they are assigned
• Manage security and operational risks across the contract
• Ensure Secure by Design and JSP 453 evidence packs are developed, maintained and remain current throughout the product's lifecycle
• Lead internal and external audits, ensuring compliance with regulatory requirements
• Provide assurance reporting to senior management and stakeholders

Compliance & Governance

• Ensure compliance with relevant legislation (e.g., GDPR, Data Protection Act)
• Develop governance frameworks and monitor adherence across the contract
• Work with legal and regulatory bodies on compliance matters

Stakeholder Engagement

• Collaborate with IT, operations, and business teams to embed security practices
• Provide training and awareness programs to promote a security-first culture
• Act as the primary point of contact for security and assurance-related matters
• Manage relationships with external partners, vendors and auditors.
• Overall management and coherence and stakeholder management.

Performance & Reporting

• Produce regular reports on security posture, risks, and compliance status
• Support business continuity and disaster recovery planning

About SiXworks

SiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.

Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.

Why Join Us

Our culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.

As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.

We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, Generous pension (10% employer, 5% employee contribution), Bonus and Professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.

A word on UK Security Clearance

Due to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found here:

United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk)