SOW: Security by Design Consultant

SOW: Security by Design Consultant - ref 1890

Location: Yeovil (1-2 days per week onsite initially)

Duration: SOW - 60 working days to be delivered before 31st March 2027 (may be follow up work past this)

Rate: £87.10ph LTD (Outside IR35)

• Active SC required

Role details:

We are looking for an experienced Security by Design Consultant for a contract engagement in Yeovil. The role will support the preparation and commissioning of an aviation-related service providing integrated logistics support (ILS), with delivery required by 31 March 2027.

Role Details:

Contract Statement of Work comprising 60 working days Weekly stand-ups required Active Security Check (SC) clearance is essential

Key Responsibilities

Develop a comprehensive Security Management Plan (SMP) covering security requirements, governance and risk management throughout the service lifecycle Define the systems and services within scope, including the security perimeter and reliance scope Document codes of connection for systems and services accessing external customer data sources Identify critical and high-priority security gaps, assigning action owners and developing sequenced remediation plans Provide estimates relating to the time, cost and complexity of closing identified security gaps Build effective relationships with key programme and security stakeholders Share information management knowledge across the security and wider programme teams Deliver high-quality outputs independently, making sound decisions based on available information

Job Requirements:

Significant experience delivering cyber security outcomes within a defence-related environment Proven experience producing detailed Security Management Plans Strong understanding of governance and risk management within a defence aviation supplier context Experience with MOD accreditation and secure-by-design processes, including ISN2023/09 Knowledge of relevant NIST Special Publications, including SP 800-30, SP 800-37 and SP 800-53 Experience applying Defence security standards, including Def Stan 05-138 Issue 4 and DEFCON 658, including update 7/26 Technical knowledge of enterprise IT and application-level security considerations Ability to develop, evaluate and analyse cyber security design constraints and detailed system security designs

Qualifications and Skills:

Degree or master's degree in cyber security, systems engineering, software engineering or a comparable discipline Recognised professional cyber security certification such as CISSP, CISM, CASP/SecurityX, ChCSP or equivalent Excellent written and verbal communication skills when engaging with internal teams and customers Strong consulting, stakeholder management and relationship-building abilities Ability to work independently, adapt to changing schedules and deliver reliable, high-quality outcomes If you are an experienced Cyber Security Consultant with expertise in security management, Defence standards and secure-by-design principles, apply now to support this important aviation and defence programme