SOW: Security by Design Consultant - ref 1890

Location: Yeovil (1-2 days per week onsite initially)

Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)

Rate: -87.10ph LTD (Outside IR35)

- Active SC required

Role details:

We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.

• Contract Statement of Work comprising 60 working days
• Weekly stand-ups required
• Active Security Check (SC) clearance is essential

• Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycle
• Define the systems and services within scope, including the security perimeter and reliance scope
• Document codes of connection for systems and services accessing external customer data sources
• Identify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plans
• Provide estimates relating to the time, cost and complexity of closing identified security gaps
• Build effective relationships with key programme and security stakeholders
• Share information management knowledge across the security and wider programme teams
• Deliver high-quality outputs independently, making sound decisions based on available information

• Significant experience delivering cyber security outcomes within a defence-related environment
• Proven experience producing detailed Security Management Plans
• Strong understanding of governance and risk management within a defence aviation supplier context
• Experience with MOD accreditation and secure-by-design processes, including ISN2023/09
• Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53
• Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26
• Technical knowledge of enterprise IT and application-level security considerations
• Ability to develop, evaluate and analyse cyber security design constraints and detailed system security designs

• Degree or master''s degree in cyber security, systems engineering, software engineering or a comparable discipline
• Recognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalent
• Excellent written and verbal communication skills when engaging with internal teams and customers
• Strong consulting, stakeholder management and relationship-building abilities
• Ability to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes

If you are an experienced Cyber Security Consultant with expertise in security management, Defence standards and secure-by-design principles, apply now to support this important aviation and defence programme.