Information Assurance Subject Matter Expert

Description

• Review Security Test Findings (SECRET) to support validation of IA requirements
• Production of Security Case (SECRET) including residual risk assessment.
• Review IA (PSEC) requirements compliance Statements from suppliers, to support Design Verification reviews and production of Security Case including residual risk assessment.
• Produce test plans,
• Performing risk assessments using multiple methods including IS1, ISO27001, NIST, Mitre, STRIDE.
• Supervise security / penetration testing,
• Travel will be required to supplier sites

Requirements

• Strong understanding of Secure by Design principles
• Strong knowledge of MOD security requirements (JSP 440,JSP 604, DEFSTANs)
• Professional Cyber security qualifications such as Full Member CIISec, CISSP, Chartered Cyber professional.
• Experience of Information Assurance risk assessment and management
• Proven experience of Product Security Engineering activities within in the defence, maritime or other regulated industries.
• UK sole national able to obtain Security Clearance (SC)

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance