Senior Security Consultant

InfoSec People Ltd; West of England; Hybrid; GBP 72.000 - 88.000; Vollzeit

Zusammenfassung

InfoSec People Ltd is seeking a cyber security professional to support defence programmes, delivering security across the lifecycle from design to deployment while balancing risk, compliance and delivery outcomes. You will work with delivery teams, architects and stakeholders, providing practical security guidance, assurance and documentation in a hybrid role based in Bristol or London.

Experience in regulated environments and familiarity with JSP 440, NCSC guidance, RMADS and related artefacts

Qualifikationen

• Experience in cyber security delivery within defence or government
• Ability to operate between technical teams and senior stakeholders
• Knowledge of security assurance artefacts and governance processes
• Experience with RMADS, JSP 440 and related assurance documentation
• Familiarity with NCSC guidance and cyber security best practices
• Experience with cloud, digital or enterprise technology programmes
• Hold qualifications such as CISM, CISSP, PriCSP

Aufgaben

• Providing practical security advice to programme and delivery teams
• Supporting projects through security assurance and governance activities
• Identifying, assessing and managing security risks
• Producing, reviewing and maintaining security documentation and assurance artefacts
• Engaging with customer security stakeholders and approval authorities
• Ensuring security requirements are understood and embedded within delivery plans
• Supporting secure-by-design approaches across systems and services
• Helping programmes balance operational requirements, risk and compliance obligations

Kenntnisse

Cyber security governance

Security risk management

Information assurance

Security requirements management

Stakeholder management

Security documentation

Risk-based decision making

Defence or MOD environments

JSP 440

RMADS & security cases

Security accreditation

NCSC guidance

Cloud & enterprise tech

CISM/CISSP/PriCSP

Jobbeschreibung

Up to £80,000 | Bristol or London (Hybrid)

I'm looking for a cyber security professional to support the delivery of critical defence programmes, helping projects navigate complex security requirements while enabling successful delivery outcomes.

This role sits at the intersection of security, risk, governance and programme delivery. You'll work closely with project teams, architects, engineers and stakeholders to ensure security is considered throughout the lifecycle, from initial design through to operational deployment.

What You'll Be Doing

• Providing practical security advice to programme and delivery teams
• Supporting projects through security assurance and governance activities
• Identifying, assessing and managing security risks
• Producing, reviewing and maintaining security documentation and assurance artefacts
• Engaging with customer security stakeholders and approval authorities
• Ensuring security requirements are understood and embedded within delivery plans
• Supporting secure-by-design approaches across systems and services
• Helping programmes balance operational requirements, risk and compliance obligations

What We're Looking For

You’ll likely have experience supporting secure delivery within defence, government or other highly regulated environments and be comfortable operating between technical teams and senior stakeholders.

Experience in some of the following areas:

• Cyber security assurance and governance
• Security risk management
• Information assurance and compliance activities
• Security requirements management
• Stakeholder management across complex delivery environments
• Security documentation and evidence generation
• Risk-based decision making
• Defence or MOD environments
• JSP 440 and associated security policy frameworks
• RMADS, security cases or related assurance documentation
• Security accreditation or authorisation processes
• NCSC guidance and cyber security good practice
• Cloud, digital or enterprise technology programmes
• Hold qualifications such as CISM, CISSP, PriCSP

This role would suit someone who enjoys working closely with delivery teams, influencing security outcomes, and helping organisations navigate complex security and assurance requirements in mission-critical environments.