12 of 12 HMG Security Policy Framework Jobs in the UK

Tech to connect them with exceptional professionals for this role. Made Tech helps UK government and public sector organisations build better digital services — and security is central to that mission. As a Lead Security Assurance Engineer in our Cyber practice, you'll be the most senior security assurance voice on client engagements, setting the technical direction for how organisations identify, assess, and respond to security risk. You'll work across complex government programmes where the stakes are real: services that affect citizens, systems that hold sensitive data, and teams that need to move quickly without ...

Conduct and manage security risk assessments, mitigation planning and ongoing threat analysis Ensure compliance with: HMG Security Policy Framework (SPF) and GovS 007 NPSA guidance Loss Prevention Standards (LPS) Oversee access control, CCTV, perimeter protection and intrusion detection systems Maintain compliance with Facility Security … Manager or Physical Security leadership role within: Data centres Critical national infrastructure Government or defence environments Strong working knowledge of: HMG SPF and GovS 007 Security risk management frameworks NPSA guidance and LPS standards Experience working within regulated or high-security environments Understanding of Facility ...

Contract Role – DV Cleared Security Architect – London/Hybrid – 06 months initial – Inside IR35 As Security Architect you will have the capability to deal with complex, sometimes unique situations, which will require deep technical expertise and the ability to communicate complex security concepts to both technical … processes at a national level at all Government security Classification (GSC) levels. Understanding of the Cabinet Office Security Policy Framework (SPF), and knowledge of security policy at the higher security classifications. Experience - Desirable Experience of working within the Policing sector. Cyber/Information ...

Security Architect Based at client locations, working remotely, or based in our Godalming or Milton Keynes offices. Salary up to £80k, plus excellent company benefits. About Us Triad Group Plc is an award-winning digital, data, and solutions consultancy with over 35 years' experience primarily serving the UK public … track unsafe products Powering systems that help the government monitor and reduce greenhouse gas emissions from commercial transport Role Summary Triad is seeking a Security Architect; you will play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design ...

focused and successful digital services ensuring governance standards are adhered to Assist in implementing toolkits and APIs for purposes such as integration, performance optimisation, security and scalability Keeping an open mind and exploring innovative ways to solve problems, working in a fail-fast fashion to provide required functionality Embrace … agreed governance and processes Proactively apply HMG IA technical security controls according to ISO 27001 & the Security Policy Framework (SPF) Behavioural Understanding yourself to be a leader (and the impact of your behaviour on others in a project team focused on results) Engaging Stakeholders ...

highly user-focused and successful digital services, ensuring governance standards are adhered to. Implement toolkits and APIs for purposes such as integration, performance optimisation, security, and scalability. Explore innovative ways to solve problems, working in a fail-fast … fashion to provide required functionality. Apply HMG IA technical security controls according to ISO 27001 & the Security Policy Framework (SPF). Required Skills & Qualifications: Significant experience in delivering technical solutions as part of large projects. Proficient with modern delivery models such as Scrum and Agile. ...

experienced Security professional looking to make a real impact within Defence and Aerospace? We're recruiting on behalf of a growing SME working across the full product design lifecycle, where you'll play a critical role safeguarding cutting-edge products and systems. About the Role As Product Security Engineer, you'll work closely with Project Teams across engineering, product development and quality assurance to embed Secure by Design (SbD) principles and security best practice throughout the product lifecycle, producing and delivering Product Security Assurance artefacts to meet customer requirements. What You'll Be Doing Undertaking ...

Senior Cyber Security Consultant As a Senior Cyber Security Consultant at Actica, you will have the opportunity to provide support to a wide range of high‐profile UK public sector, critical national infrastructure and defence organisations. Your help will enable them to protect their ICT investments … Defence, Critical National Infrastructure and Public Sectors, particularly in ICT and enterprise solutions, is highly desirable. Structured security frameworks, such as HMG SPF and ISO27001; Security, technical and enterprise architecture methods such as TOGAF and SABSA; Technical risk assessments; Enterprise security packages; Software development and delivery ...

Information Officer Date: 16 Mar 2026 Location: Gatwick, GB Salary: Up to £175,000 per annum dependent upon experience Contract Type: Permanent – Full Time Security Level: SC Base Location: Aviation House, Gatwick We are the UK's aviation and aerospace regulator and recognised as a world leader … setting the direction for a secure, innovative, and cost-effective technology estate that supports organisational priorities and service delivery. Oversee information governance and cyber security, ensuring data protection and compliance with best practices and regulations. Drive digital transformation, championing user‐centred design and the use of technology to improve ...

technology domains, including Operational Technology (OT), Information Technology (IT), Technical Architecture, and Supply Chain. This role focuses on evaluating the effectiveness of cyber security controls, identifying areas of risk management, and ensuring that appropriate mitigation strategies are in place. Working under the direction of the Cyber Assurance Principal Advisor … certifications (e.g., ISO 27001 Auditor, CISA, GIAC) Desirable: Experience in the nuclear or CNI sector; familiarity with ONR SyAPs, NISR 2003, and HMG SPF; experience with assurance tooling or evidence management platforms What's on offer Annual bonus of up to 15%, made up of company and personal performance ...

regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. … Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping ...

regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. … Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping ...