Security Risk Manager

Prattwhitney; Warminster; On-site; GBP 65,000 - 90,000; Full time

Job summary

OMNIA Training, a leading UK defence training alliance, seeks a Security Risk Manager to drive information assurance and cyber security across the Collective Training Transformation Programme. You will collaborate with multiple teams and suppliers, reporting risks and delivering compliant artefacts.

The role requires deep knowledge of MoD standards, security design, and risk mitigation, with the ability to travel across the UK and obtain SC clearance.

Qualifications

• Sound experience of Security Risk Management.
• Passion for Information Security/ Assurance and continuous learning.
• Self-motivated, problem solver, organised and in possession of good business acumen.
• Dynamic and actively acute to evolving Security Risks and their potential impact to the Programme.
• Team player but able to work effectively alone.
• Ability to travel within the UK.
• Security cleared or ability to obtain (SC or above).

Responsibilities

• Input, management and dissemination of security risks from across all of OMNIA, and ensuring that security risks are properly reported to all relevant Stakeholders in accordance with the defined governance/assurance model.
• Supporting the Information Assurance team with the implementation of the MoD Secure by Design methodology.
• Ownership and maintenance of artefacts such as: Security Risk Management Plan, Security Risk Register, and Key Security Risk Indicators.
• Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-30/37/53).
• Support Information Assurance based engagements with Partners/suppliers and Authority representatives.
• Support and contribute towards Security Working Groups and forums with stakeholders.

Skills

Security risk management

InfoSec/ Assurance

Communication skills

UK travel

Security clearance

MoD Secure by Design

Information Assurance

Cyber security

Supply chain assurance

ISO/NIST standards

Matrix management

Cloud platforms

SDLC understanding

Stakeholder engagement

Job description

Be at the forefront of transforming British Army training

About us

At OMNIA® Training, we’ve brought together some of the UK’s most innovative defence training organisations under one powerful mission: to transform the British Army’s training system and create the best‑trained Army in the world. OMNIA are redefining the British Army’s collective training. To do that, we are looking for the best and brightest minds from across the UK. We are backed by British innovation and powered by world‑class experts, like you. OMNIA is at the heart of the UK’s bold Land Industrial Strategy.

The Role

This is more than a job — it’s a mission. You will be part of a high‑impact, collaborative environment, where we expect everyone to live the values and standards of the British Army. Every person in our team plays a critical role in delivering OMNIA’s vision; designing, delivering, and transforming collective training so the British Army is ready to fight and win. You’ll work in a matrix organisation and report operationally through OMNIA Training Design Branch and functionally through the Raytheon UK Engineering Management team. Ultimately, you’ll work for the British Army, championing innovation, and helping shape the future of military collective training. The Omnia Security Risk Manager role requires a versatile individual who can make effective and highly valued contributions to activities across the project lifecycle in collective training and deployed IT environments. The candidate is expected to be capable of operating in a technical role working closely with customers and delivery teams; alone and unsupervised if necessary. This position is critical to the successful delivery of the Collective Training Transformation Programme (CTTP), ensuring that training is delivered to meet the British Army’s needs. This role concentrates on Information Assurance and Cyber Security but does not exclude supporting Physical and Personnel security elements. The successful candidate needs to be able to talk to both technical experts and wider organisational stakeholders, applying a holistic approach to create solutions that will help the Organisation achieve its goals. The candidate must be a team player who can work with a multi‑skilled engineering team and the customer community.

Key Responsibilities

• Input, management and dissemination of security risks from across all of OMNIA, and ensuring that security risks are properly reported to all relevant Stakeholders in accordance with the defined governance/assurance model (aligned with MoD Secure by Design).
• Supporting the Information Assurance team with the implementation of the MoD Secure by Design methodology.
• Ownership and maintenance of artefacts such as: Security Risk Management Plan, Security Risk Register, and Key Security Risk Indicators.
• Supporting the development of the necessary Information Assurance artefacts and outcomes which support compliance against the MoD assurance process (NIST 800-30/37/53).
• Support Information Assurance based engagements with Partners/suppliers and Authority representatives.
• Support and contribute towards Security Working Groups and forums with stakeholders.

Essential Skills and Experience

• Sound experience of Security Risk Management
• Passion for Information Security/Assurance and continuous learning
• Self-motivated, problem solver, organised and in possession of good business acumen
• Dynamic and actively acute to evolving Security Risks and their potential impact to the Programme (technology/schedule/cost)
• Team player but able to work effectively alone
• Ability to work within a fast‑paced environment
• Strong communication skills (i.e. oral, presentation and written) with a collaborative approach to teamwork - able to constructively challenge
• Understanding of simulated environments
• In‑depth knowledge of Information Assurance and Cyber Security principles, processes and procedures
• Knowledge of Information Assurance and a typical design lifecycle process
• Knowledge of the MoD Secure by Design framework
• Knowledge of supply chain assurance and the relevant MoD standards & policies
• Ability to interpret and solve complex security issues/challenges through analysis or discussion
• Ability to travel (within the UK)
• Security cleared or ability to obtain (SC or above)

Desirable Skills and Experience

• Highly organised, discrete, outcome focussed, with a "can do" attitude
• Comfortable working in a Matrix Management Organisation
• Effectively translate and accurately communicate service/system level security issues and risks to leadership/management
• Previous working relationships with senior leadership (e.g. Delivery Team Security Leads)
• Working knowledge of ISO 27001 or equivalent standards
• Knowledge of the UK MoD operating model and procurement process for Defence contracts
• Advising leadership and management on technology evolution, emerging issues, cost & schedule implications
• Forward facing, able to engage with peers/Customers
• Sound understanding of cloud infrastructure environments and technology (e.g. AWS, Azure, Google)
• Knowledge of the Software Development Lifecycle for applications and services
• Working knowledge of Gov Standard 007: Security, NIST standards (800-30/37/53/161), MITRE ATT&CK, CIS Controls, ISO 27001/5, Def-Stan 05-138, JSP 892, and Industry Security Notices
• Understands security requirements and how to decompose them
• Experience of assessment of systems in non-standard environments (not just IT systems)
• Possession of a security qualification such as CISM, CRISC, CISSP, CCSP etc
• Support developing plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans

What we offer

Be Part of a Ground-breaking Mission Join the UK’s most advanced defence training alliance, where industry experts converge to push boundaries and deliver excellence. A Culture Built on Collaboration Work in an inclusive, high‑performing team that celebrates ideas, supports growth, and is laser-focused on delivering results. Team dynamics You will be part of a team that works together, across multiple organisations united in one mission. Work Across Borders, United in Purpose Operate across organisations with one shared goal - improving capability across all domains. Drive Innovation Your voice matters. We champion new ideas, welcome change, and believe in continuous improvement with a growth mind-set. Shape the Future Play a crucial role in a long‑term, future‑facing programme with real‑world impact on national defence.

Career Growth & Benefits

Enjoy a strong benefits package, ongoing development opportunities, and clear pathways to progress within a trusted defence industry partner.

Equal Opportunity

OMNIA® Training and its partners are proud to be an equal opportunity employer. We welcome applicants of all backgrounds and identities — what matters is your passion, your expertise, and your dedication to the mission.

#LI-JR1 RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, colour, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.

Privacy Policy and Terms: Click on this link to read the Policy and Terms RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.