22 of 22 HMG Security Policy Framework Jobs in the UK

compliance with the firm’s security policy framework and observance of principles outlined in government regulations and standards i.e. HMG SPF, Functional standards GovS007.Delivering the efficient and effective co-ordination and execution of security operations in the areas of physical, material, document, personnel, and information … joiners and refresher training as appropriate.Connect to your skills and professional experience Essential:Working knowledge of HMG Security Policy Framework (SPF) and Functional Standard GovS007 and the Official Secrets Act (OSA).Ability to handle security material effectively, ideally including cryptographic material.Excellent interpersonal communication skills, both ...

summary We are seeking a Cyber & Corporate Risk Officer to join the UKHSA Cyber Security team. This is an exciting opportunity to become a central part of this build and support the continuous development of the Cyber Governance Risk & Compliance function, provide strategic direction whilst managing the challenges … Standards Support the maintenance of UKHSAs Cyber Risk Management Framework Assist in assessing cyber risks against: Government Security Policy Framework (SPF) DSPT Cyber Assurance Framework NCSC guidance ISO 27001/NIST aligned approaches Promote a proportionate, risk-based approach to cyber security across ...

/PT/Casual: FullTimeDepartment: LM UK LTD (Shared Services)Business Unit: LM UK LTD (Shared Services)About the roleReporting to the EMEA Information Security Officer, the Information Security Engineer will be responsible for the security engineering, accreditation, and lifecycle assurance of classified and sensitive IT systems. … Engineering, or a related discipline.Experience within Defence, Aerospace, Government, or National Security sectors.Additional RequirementsKnowledge of UK Government Security Policy Framework (SPF), NCSC guidance, JSP 440, and Defence security requirements.Understanding of GDPR and UK Data Protection Act requirements where applicable.Ability to obtain and maintain UK Security ...

Hours per week:37.5Active SC Clearance RequiredJob Description:ResponsibilitiesOversee and guide a team of consultants from the UK business who are fulfilling our cloud security assurance process for non-core cloud systemsMaintain and implement our overall Secure Networks Security Assurance framework, including creation of protocols and processes … Cyber Security Model, Secure By Design, Industry Security NoticesStrong familiarity with UK Government security standards such as 007/SPF, NCSC Cloud Security Principles, NCSC Principles for Using Software as a Service (SaaS) securely, Cyber Essentials, and the CHECK penetration testing schemeBroad familiarity with UK Government ...

Title Security Assurance Manager Office Location: Flexible within UK offices Start Date: ASAP End Date: 12 - 18 months from start Pay rate per day: £550 - £680 Inside IR35 Hours per week: 37.5 Active SC Clearance Required Job Description: Responsibilities Oversee and guide a team of consultants from … Cyber Security Model, Secure By Design, Industry Security Notices Strong familiarity with UK Government security standards such as 007/SPF, NCSC Cloud Security Principles, NCSC Principles for Using Software as a Service (SaaS) securely, Cyber Essentials, and the CHECK penetration testing scheme Broad familiarity with ...

most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with our range of Defence and Security clients, from the strength of our relationships to the variety of our skills and expertise that we bring to help these clients deliver on their … recognise the importance of bringing together diverse experience and perspectives to innovatively solve some of our clients most complex problems and as a Cyber Security Manager, you will become a trusted advisor to those clients, helping them to navigate the complex world of cyber security, building robust security ...

Aerospace, Defence and Critical National Infrastructure (CNI), and Operational Technology (OT). Due to our continued growth, we have open positions in our GRC, Security Architecture, Threat and Vulnerability, and Operational Technology teams. Our role as trusted advisors allows us to offer rewarding careers to those seeking to enhance … their skills and experience in dynamic environments. As a Senior Cyber Security Consultant, you’ll play a pivotal role in protecting Aerospace, Defence and CNI/OT clients from evolving cyber threats. You’ll lead projects that shape national security, working alongside industry experts in a supportive, innovative ...

biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with Defence and Security clients, the strength of our relationships, and the variety of our skills and expertise that we bring to help them achieve their mission.We’re growing … lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Connect to your opportunity A Security Architect operates as a senior member of the team, responsible for the design of technical security solutions, maintaining documentation and developing architecture patterns ...

biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with Defence and Security clients, the strength of our relationships, and the variety of our skills and expertise that we bring to help them achieve their mission.We’re growing … lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Connect to your opportunity A Security Architect operates as a senior member of the team, responsible for the design of technical security solutions, maintaining documentation and developing architecture patterns ...

biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with Defence and Security clients, the strength of our relationships, and the variety of our skills and expertise that we bring to help them achieve their mission.We’re growing … lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Connect to your opportunity A Security Architect operates as a senior member of the team, responsible for the design of technical security solutions, maintaining documentation and developing architecture patterns ...

biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with Defence and Security clients, the strength of our relationships, and the variety of our skills and expertise that we bring to help them achieve their mission.We’re growing … lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Connect to your opportunity A Security Architect operates as a senior member of the team, responsible for the design of technical security solutions, maintaining documentation and developing architecture patterns ...

biggest and most ambitious programmes undertaken to keep our country safe We are proud of the impact we have with Defence and Security clients, the strength of our relationships, and the variety of our skills and expertise that we bring to help them achieve their mission.We’re growing … lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Connect to your opportunity A Security Architect operates as a senior member of the team, responsible for the design of technical security solutions, maintaining documentation and developing architecture patterns ...

hackajob is partnering directly with Actica Consulting to hire for this role. As a Lead Cyber Security Consultant at Actica Consulting, you will have the opportunity to lead multiple, small Actica teams in their support to a wide range of high-profile UK public sector and defence organisations. Your … Strong verbal and written communications skills. Knowledge of the following is highly desirable for the role: Structured security frameworks, such as HMG SPF and ISO27001; Security, technical and enterprise architecture methods such as TOGAF and SABSA; Technical risk assessments; Software development methods and techniques e.g. Agile methods ...

Cleared - Senior Security Engineer - Inside IR35 Location: Bristol, Manchester, London Type : 3 days on-site Clearance: SC Cleared IR35: Inside Rate(s): £500 - £700 (Varying levels of Seniority) Length: Initial 6 months Sanderson G&D are seeking a number of Security Engineers for a range of Public Sector … Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with UK government security frameworks (GovAssure, NCSC Cyber Assessment Framework, HMG SPF) Experience contributing reusable security patterns, tooling, or paved-road templates back into an engineering practice. Evidence of mentoring engineers on secure coding and secure ...

Senior Cyber Security Consultant As a Senior Cyber Security Consultant at Actica, you will have the opportunity to provide support to a wide range of high‐profile UK public sector, critical national infrastructure and defence organisations. Your help will enable them to protect their ICT investments … Defence, Critical National Infrastructure and Public Sectors, particularly in ICT and enterprise solutions, is highly desirable. Structured security frameworks, such as HMG SPF and ISO27001; Security, technical and enterprise architecture methods such as TOGAF and SABSA; Technical risk assessments; Enterprise security packages; Software development and delivery ...

spam filtering, malware protection, and threat detection rules. Monitor, investigate, and respond to email-based security incidents. Configure and maintain email authentication protocols: SPF DKIM DMARC Conduct threat analysis and provide recommendations to enhance email security posture. Perform platform upgrades, health checks, troubleshooting, and performance tuning. Collaborate with … Threat Intelligence Data Loss Prevention (DLP) Experience with: Microsoft 365/Exchange Online Exchange Server SMTP Routing Mail Flow Architecture Hands-on knowledge of SPF, DKIM, DMARC, and email fraud prevention. Experience in security incident investigation and remediation. Strong understanding of malware analysis and advanced email threats. Familiarity with ...

filtering, malware protection, and threat detection rules. • Monitor, investigate, and respond to email-based security incidents. • Configure and maintain email authentication protocols: o SPF o DKIM o DMARC • Conduct threat analysis and provide recommendations to enhance email security posture. • Perform platform upgrades, health checks, troubleshooting, and performance tuning. … Prevention (DLP) • Experience with: o Microsoft 365/Exchange Online o Exchange Server o SMTP Routing o Mail Flow Architecture • Hands-on knowledge of SPF, DKIM, DMARC, and email fraud prevention. • Experience in security incident investigation and remediation. • Strong understanding of malware analysis and advanced email threats. • Familiarity with ...

Information Officer Date: 16 Mar 2026 Location: Gatwick, GB Salary: Up to £175,000 per annum dependent upon experience Contract Type: Permanent – Full Time Security Level: SC Base Location: Aviation House, Gatwick We are the UK's aviation and aerospace regulator and recognised as a world leader … setting the direction for a secure, innovative, and cost-effective technology estate that supports organisational priorities and service delivery. Oversee information governance and cyber security, ensuring data protection and compliance with best practices and regulations. Drive digital transformation, championing user‐centred design and the use of technology to improve ...

solutions to assist in operations and strategic work.This role is aligned to the Developer role set out within the Digital and Data Profession Capability Framework (DDAT).You’ll join a new team of Software engineers, working flexibly from home and with an office space in our air-conditioned operations … required.Vetting This post requires access to the most sensitive intelligence material on a daily basis. Applicants must hold or be prepared to undergo National Security Vetting (NSV) Developed Vetting (DV) level before taking up the post. This post requires British nationality (some dual nationals may be ineligible) and Developed ...

regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. … Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping ...

regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. … Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping ...

Epsom, Surrey. This is a full-time, on-site role supporting, managing, and optimising office infrastructure and data centre operations to ensure seamless performance, security, and reliability. The ideal candidate will have 3-5 years of hands-on experience supporting physical servers, managing a Microsoft environment, and troubleshooting networks … security policies. Cybersecurity – Implement security best practices, conduct vulnerability assessments, and apply patches to maintain compliance. Email Deliverability & Authentication – Configure and monitor SPF, DKIM, DMARC, and DNS settings to optimise email performance. User Support – Provide 1st-3rd line support, troubleshoot issues, maintain IT assets, and improve IT workflows. ...