SOW: Security by Design Consultant

Matchtech Group; West of England; On-site; GBP 99,000 - 141,000; Full time

Job summary

Matchtech Group in the United Kingdom is seeking an experienced Security by Design Consultant for a 60-working-day contract in Yeovil, with initial 1-2 days on site. The role focuses on preparing and commissioning an aviation-related service delivering integrated logistics support (ILS) by 31 March 2027.

The successful candidate will produce a Security Management Plan, define scope and security perimeter, identify gaps, and collaborate with key stakeholders while maintaining SC clearance.

Qualifications

• Degree or master's in cyber security, systems engineering, software engineering or equivalent.
• Recognised professional cyber security certification (CISSP, CISM, CASP/SecurityX, ChCSP or equivalent).
• Excellent written and verbal communication with internal teams and customers.
• Strong consulting, stakeholder management and relationship-building abilities.

Responsibilities

• Develop a comprehensive Security Management Plan covering security requirements, governance and risk management throughout the service lifecycle.
• Define the systems and services within scope, including security perimeter and reliance scope.
• Document codes of connection for systems and services accessing external customer data sources.
• Identify critical and high-priority security gaps, assign action owners and develop remediation plans.
• Provide estimates relating to time, cost and complexity of closing identified security gaps.
• Build relationships with key programme and security stakeholders.
• Share information management knowledge across security and programme teams.
• Deliver high-quality outputs independently with sound decision-making.

Skills

Security by Design

Cyber security

MOD accreditation

NIST SP 800-53

Education

Degree in cyber security

Professional cyber security certification such as CISSP

Job description

SOW: Security by Design Consultant - ref 1890

Location: Yeovil (1-2 days per week onsite initially)

Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)

Rate: £87.10ph LTD (Outside IR35)

- Active SC required

Role details:

We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.

Role Details:

• Contract Statement of Work comprising 60 working days
• Weekly stand-ups required
• Active Security Check (SC) clearance is essential

Key Responsibilities:

• Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycle
• Define the systems and services within scope, including the security perimeter and reliance scope
• Document codes of connection for systems and services accessing external customer data sources
• Identify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plans
• Provide estimates relating to the time, cost and complexity of closing identified security gaps
• Build effective relationships with key programme and security stakeholders
• Share information management knowledge across the security and wider programme teams
• Deliver high-quality outputs independently, making sound decisions based on available information

Job Requirements:

• Significant experience delivering cyber security outcomes within a defence-related environment
• Proven experience producing detailed Security Management Plans
• Strong understanding of governance and risk management within a defence aviation supplier context
• Experience with MOD accreditation and secure-by-design processes, including ISN2023/09
• Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53
• Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26
• Technical knowledge of enterprise IT and application-level security considerations
• Ability to develop, evaluate and analyse cyber security design constraints and detailed system security designs

Qualifications and Skills:

• Degree or master's degree in cyber security, systems engineering, software engineering or a comparable discipline
• Recognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalent
• Excellent written and verbal communication skills when engaging with internal teams and customers
• Strong consulting, stakeholder management and relationship-building abilities
• Ability to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes