Product Security Capability Manager

Leonardo UK Ltd; West of England; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading aerospace and defense company in the UK seeks a Product Security Capability Manager to coordinate cyber resilience activities across functions and ensure compliance with security standards. This hybrid role offers competitive benefits and opportunities for growth. Candidates should have hands-on experience in security risk management, familiarity with UK legislation, and relevant qualifications.

Benefits

Generous leave with flexi-days

Award-winning pension scheme

Mental health support

Bonus scheme

Access to online courses

Financial rewards for referrals

Flexible benefits package

Flexible working hours

Qualifications

• Hands-on experience developing a robust security risk management system.
• Familiarity with UK legislation like IPA, DPA, Official Secrets Act.
• Registration or equivalent qualification as NCSC Certified Professional.

Responsibilities

• Coordinate product cyber resilience activities.
• Maintain product security and Information Management System.
• Liaise with external Security Accreditors for accreditation.

Skills

Security risk management

Knowledge of UK legislation

NCSC Certified Professional

Information Assurance standards

Incident investigation

Crypto technologies

High integrity electronics design

Job description

Job Description:

Your Impact

Our Design Integrity function is currently recruiting for a Product Security Capability Manager. Working in our Electronics division (LEUK), the main purpose of your role is the coordination of product cyber resilience activities, in particular, within the technical and business functions, to ensure continued product compliance with internal and external cyber security standards.Working with the Heads of Product Security across all lines of business, you will have responsibility for the Electronics UK Product Security and Information Management System, security tools and process and their effectiveness. In addition to this, you will also lead the Product Compliance Team Product Security Working Group. Please note, the role is working on a hybrid basis and can be based at any of the following sites; Edinburgh, Luton, Basildon, Southampton, Newcastle, Bristol and Lincoln. Internal applicants please note that the job title for this role is Product Cyber Resilience Officer.

Your responsibilities include;

• Partnering with technical and business functions across LEUK, including; Engineering, Manufacturing, Customer Support, Physical Security and Information Technology to ensure continued compliance with internal and external cyber security standards specified by national security authorities or by international bodies and with cyber security requirements expressed by the customer.
• Maintain the Electronics Product Security and Information Management System, security tools and process.
• Liaise with external Security Accreditors and Security Assurance Coordinators in support of security accreditation.
• Regularly refresh current knowledge of security legislation in UK, EU and relevant markets for LEUK.
• Advising internal stakeholders to promote security culture, working with security teams to ensure secure working practices are adhered to.
• Developing and delivering training courses and presenting (with confidence) on Product Security and Information Assurance matters.
• Performing audits of internal and external subcontract teams assuring that security and Information Assurance requirements are achieved.

What you’ll bring;

• Recent Hands-on experience of developing a robust security risk management system for complex products and high integrity electronic systems in accordance with customer, regulatory and legislative expectations.
• Familiarity with current Legislation – eg IPA, DPA, Official Secrets Act.
• Registration with NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification.
• Knowledge of UK/NATO Information Assurance standards, procedures & systems, including HMG Security Policy Framework, ISO security standards, DO326A.
• Familiarity with incident investigation processes and knowledge of how to implement an investigation process.
• Practical experience of NCSC and Common Criteria security evaluation techniques and requirements up to High Grade.
• Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations.
• Ideally a background in design implementation of high integrity complex electronics, such as Software design to DO178C, Complex Electronics hardware to DO254.
• Good understanding and experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754,
• Understanding of the concept of operations for products, in order to understand the functional security risks and define/agree the appropriate mitigations.
• Knowledge of the role of advisory boards within the UK Government or NATO for security.

This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.

Security Clearance

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance, please visit: https://careers.uk.leonardo.com/gb/en/security-and-vetting

Why join us

At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work–life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we’re here to help you thrive.

• Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.
• Secure your Future: Benefit from our award-winning pension scheme with up to 15% employer contribution.
• Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).
• Rewarding Performance: All employees at management level and below are eligible for our bonus scheme.
• Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning.
• Refer a friend: Receive a financial reward through our referral programme.
• Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more.
• Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role.

For a full list of our company, benefits please visit our website.

Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team—they are key contributors to shaping innovation, advancing technology, and enhancing global safety.

At Leonardo, we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know.

Be part of something bigger - apply now!

Primary Location:

GB - Bristol - Others

Additional Locations:

GB - Basildon, GB - Edinburgh, GB - Lincoln, GB - Luton - Cap. Green 300, GB - Newcastle, GB - Southampton

Contract Type:

Permanent

Hybrid Working:

Hybrid