Security Consultant: Strategic Risk & GRC for Defence Tech

IBM SiXworks; Farnborough; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days annual leave

Private Medical cover

Life Assurance

Generous pension (10% employer, 5%员工)

Job summary

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions in highly secure environments. You will work with engineers, architects and delivery specialists to enable faster, safer decision-making for critical operations.

Essential experience includes risk assessments (NIST/ISO 27005), producing risk treatment plans, audits/support, and security documentation. Knowledge of MOD policies and Agile/DevSecOps is required; UK Security Clearance eligibility is

Qualifications

• Experience of risk assessments using industry methodologies (e.g., NIST, ISO 27005).
• Producing risk treatment plans aligned to security objectives.
• Experience supporting audits, control testing, and evidence gathering.
• Creation of security documentation (Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results).
• Ability to translate technical security risks into business language for senior stakeholders.
• High standards in written reports and design documentation.
• Knowledge of MOD policies JSP 440, 453/604, 892.
• Knowledge and experience of Agile, DevSecOps, CI/CD principles in secure environments.
• Experience with MOD Cyber Assurance/Accreditors.

Responsibilities

• Design, build, and deliver secure digital solutions in highly secure environments.
• Collaborate with engineers, architects, and delivery specialists to enable faster, safer decision-making for critical operations.
• Perform Cyber Risk Management within Defence and Security Sector.
• Provide strategic security governance, risk and compliance direction for projects.
• Engage with MOD stakeholders to identify key security objectives and requirements.
• Work with Software Eng., DevSecOps, Infrastructure Eng., Agile Development, and Support teams to achieve security outcomes.

Skills

Risk assessment

Security governance

Audit support

Security documentation

Business risk translation

Written reporting

Agile/DevSecOps/CI-CD

MOD policies knowledge

Stakeholder engagement

Job description

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions in highly secure environments. You will work with engineers, architects and delivery specialists to enable faster, safer decision-making for critical operations.

Essential experience includes risk assessments (NIST/ISO 27005), producing risk treatment plans, audits/support, and security documentation. Knowledge of MOD policies and Agile/DevSecOps is required; UK Security Clearance eligibility is