Security by Design Consultant

Morson Group; Yeovil; On-site; GBP 103,000 - 139,000; Full time

Job summary

Morson Group is recruiting a Security by Design Consultant – Defence in Yeovil with a requirement for active SC and sole British citizenship. The role involves delivering a Security Management Plan and addressing security gaps across the service lifecycle, with a focus on defence standards.

The engagement runs for 60 working days (approximately 3 months) with ~40% onsite attendance and weekly stand-ups, paying £87.96 per hour outside IR35.

Qualifications

• Proven experience producing detailed Security Management Plans within defence.
• Knowledge of governance and security.

Responsibilities

• Produce a detailed Security Management Plan covering the systems, services, assets and security boundaries supporting the programme.
• Define dependencies and codes of connection to external customer data sources.
• Identify critical and high-priority security gaps, with clear action owners and a sequenced remediation plan.
• Estimate the time, cost and complexity of addressing identified gaps.
• Apply MOD Secure by Design principles and relevant defence security standards.
• Work with technical teams and customer stakeholders to gather information, assess risks and agree practical security measures.

Skills

Security Management Plans

Governance & Security

Job description

Security by Design Consultant – Defence

Location: Yeovil – expected 40% onsite attendance, including at least weekly stand-ups
Rate: £87.96 per hour, Outside IR35
Duration: 60 working days spread across the engagement, concluding no later than 31 March 2027 - in effect, 3 months
Clearance: Active SC required
Nationality: Sole British citizens only due to programme requirements

We’re recruiting a Security by Design Consultant to deliver a defined statement of work supporting the introduction of a defence aviation support service.

You’ll take ownership of developing a comprehensive Security Management Plan, setting out how customer security requirements will be met and how risk will be managed throughout the service lifecycle. This will include identifying security gaps and developing a prioritised action plan to address them.

Key responsibilities

• Produce a detailed Security Management Plan covering the systems, services, assets and security boundaries supporting the programme.

• Define dependencies and codes of connection to external customer data sources.

• Identify critical and high-priority security gaps, with clear action owners and a sequenced remediation plan.

• Estimate the time, cost and complexity of addressing identified gaps.

• Apply MOD Secure by Design principles and relevant defence security standards.

• Work with technical teams and customer stakeholders to gather information, assess risks and agree practical security measures.

Skills and experience required

• Proven experience producing detailed Security Management Plans within defence.

• Knowledge of governance and security