V06395 Senior Information System Security Officer

Matchtech; Lancashire; On-site; GBP 70,000 - 110,000; Full time

Job summary

Matchtech is recruiting an experienced Senior Information System Security Officer (ISSO) to support a defence and security programme focused on Product Security / Information Assurance across synthetic training systems. This is a 12-month contract, working full time on site in Warton, Lancashire.

The role involves delivering compliance, running assessments and vulnerability management, applying security standards, and collaborating with engineering teams across the design, development and

Qualifications

• Experience in cyber security / information assurance in defence sector.
• Knowledge of security standards: NIST SP 800-53, STIGs, Def Stan 05-138, JSPs, MOD Secure by Design.
• Ability to communicate security risks clearly to technical and non-technical audiences.

Responsibilities

• Support the ISSO team to deliver Product Security and Information Assurance compliance.
• Run compliance assessments, assurance reviews, and vulnerability management activities.
• Maintain understanding of security standards and apply them to engineering delivery.
• Analyse findings, identify residual and emerging risks, and propose remediation.
• Collaborate with engineering teams across design, development, and delivery lifecycle.
• Engage with wider ISSO teams, with occasional UK/international travel as required.

Skills

Cyber security

Information assurance

Security standards

Education

STEM degree

CISSP

CISM

Job description

We're recruiting for an experienced Senior Information System Security Officer (ISSO) to support a specialist defence and security programme focused on Product Security / Information Assurance across synthetic training systems. This is a 12-month contract, working full time on site in Warton, Lancashire.

Key details

• Location: Warton (near Preston), Lancashire (on-site)
• Contract length: 12 months
• Hours: 37 hours per week (full time on site)
• IR35: Inside IR35
• Clearance: BPSS + Full SC required
• Restrictions: ITAR and UK Eyes Only
• Ref: 610205

What you'll be doing

• Supporting the ISSO team to deliver Product Security and Information Assurance compliance
• Running compliance assessments, assurance reviews, and vulnerability management activities
• Maintaining understanding of relevant security standards and applying them to engineering delivery
• Analysing findings, identifying residual / emerging risks, and recommending remediation actions
• Collaborating with engineering teams across the design, development, and delivery lifecycle
• Engaging with wider stakeholder ISSO teams (including occasional UK / international travel where required)

What we're looking for (essential)

• Strong experience in cyber security / information assurance (defence sector experience required)
• Familiarity with standards / frameworks such as:
  • NIST SP 800-53
  • STIGs
  • Def Stan 05-138
  • JSPs
  • MOD Secure by Design
• Ability to communicate security risks and recommendations clearly to technical and non-technical audiences

Desirable

• Experience assuring medium to large enterprise IT or OT environments
• STEM degree (or equivalent relevant experience)
• Certifications such as CISSP or CISM