Senior ISSO: Cybersecurity & Compliance for Defence OT

Outsource UK; Preston; On-site; GBP 65,000 - 90,000; Full time

Job summary

BAE Systems in Warton is seeking a Senior Information System Security Officer (ISSO) to join the team on a 12-month, full-time, on-site contract.

You will lead security compliance, information assurance and cyber security standards across a range of complex systems, working closely with engineering teams throughout the development and delivery lifecycle. The role requires 5+ years in Cyber Security or Information Assurance and professional certifications such as CISSP or CISM.

Qualifications

• 5+ years of experience within Cyber Security or Information Assurance.
• Experience with security standards and frameworks such as NIST, STIGs, Def Stan, JSPs, or Secure by Design.
• Defence sector experience.
• Strong stakeholder management and communication skills.
• Ability to communicate complex technical information to both technical and non-technical audiences.
• Experience supporting large Enterprise IT or OT environments.
• STEM degree or equivalent experience.
• Professional certifications such as CISSP or CISM.

Responsibilities

• Support security and information assurance activities across Synthetic Training devices.
• Conduct compliance reviews, audits, and vulnerability assessments.
• Identify security risks and recommend remediation activities.
• Ensure systems comply with corporate, customer, and industry security standards.
• Work closely with engineering teams throughout the development and delivery lifecycle.

Skills

Cyber Security

Information Assurance

Stakeholder management

Communication skills

Security standards

Education

STEM degree or equivalent

CISSP or CISM certification

Job description

BAE Systems in Warton is seeking a Senior Information System Security Officer (ISSO) to join the team on a 12-month, full-time, on-site contract.

You will lead security compliance, information assurance and cyber security standards across a range of complex systems, working closely with engineering teams throughout the development and delivery lifecycle. The role requires 5+ years in Cyber Security or Information Assurance and professional certifications such as CISSP or CISM.