Security and Risk advisorNew

CBS Butler; England; On-site; GBP 40,000 - 60,000; Full time

Job summary

A security consultancy firm based in the United Kingdom is seeking a professional to handle MOD security assessments and the maintenance of accreditation documentation. Responsibilities include providing security inputs during project reviews, advising on security requirements, and supporting IT health checks. Ideal candidates should be adept in managing security-related documentation and sharing insights on IT architecture vulnerabilities. This role requires effective communication and collaboration with relevant stakeholders.

Responsibilities

• Attendance at System(S) Change and Patching Reviews, providing security inputs on potential security risk.
• Advising the Project PM and SM on MOD security requirements.
• Maintenance of accreditation documentation for the Project-maintained systems.
• Produce Test Security Instructions (TSI) and other threat assessments as required.
• Provide support to IT Health Checks (ITHC) and Configuration Assessments.
• Advising the Project PM and SM on IT security architecture and vulnerabilities.
• Contribute to the quarterly Security Activity Reports.

Job description

Job Specification

• Attendance at System(S) Change and Patching Reviews, providing security inputs on potential security risk and mitigation as appropriate.
• Advising the Project PM and SM on MOD security requirements.
• Identification and assessment of the potential impact of amendments to MOD or HMG policy on the Programme.
• Maintenance of accreditation documentation for the Project-maintained systems in accordance with the security requirements of MoD, including liaison with MoD (e.g. Cyber Defence and Risk (CyDR) and other (e.g. National Cyber Security Centre (NCSC)) security stakeholders.
• Maintain the Project Security Risk Register.
• Review and update System(s) security operating procedures.
• Review and update the System(s) RMADS.
• Deliver security risk assessments as required by the project.
• Production of Test Security Instructions (TSI), Security Impact Assessments (SIA) and other threat assessments as required.
• Provision of support to IT Health Checks (ITHC), Configuration Assessments and production of Remedial Action Plans (RAP) as required.
• Advising the Project PM and SM on IT security architecture, IT security vulnerabilities and their countermeasures.
• Support the sustainment of Facility certification.
• Maintenance of relevant Codes of Connection (CoCo) and ensure continued approval for such connections.
• MoD Security Working Group (SWG) meetings.
• Participation and Taking of and distribution of minutes.
• Contribute to the quarterly Security Activity Reports.
• Assist in preparation of and presentation of materials at the SWG.
• Deliver reviews of MOD-CERT Alerts / Directives and other sources of patching and vulnerability information, providing guidance to the SM as an input into the onward reporting to the MoD.
• Development and delivery of security training to the Programme.
• Other IA Security support as required from time to time by the project.
• Support to Ad-Hoc meeting at sites other than Farnborough. Travel and subsistence shall be charged as per Condition 7 of the Contract.

Deliverables required

Monthly Service Report, to be delivered at least 3 working days before monthly reporting meeting. Report to include key activities, outputs produced, time spent, issues encountered. Date of reporting is TBC.