1 to 25 of 33 JSP 440 Jobs in England

risk or Secure by Design. Background within Defence, MOD, Government, National Security, CNI or another regulated environment. Strong knowledge of relevant frameworks, ideally including JSP 440, JSP 604, ISO 27001, NIST, CAF and Cyber Essentials. Confident written communication skills, able to produce clear, high-quality assurance documentation. ...

evidence Defence, maritime, aerospace, nuclear or another highly regulated engineering environment Experience applying relevant UK Government/defence security standards and frameworks, for example JSP 440, JSP 604, HMG IS1 & IS2, RMADS, Defence Standards (Def Stan), ISO 27000 and/or IEC 62443 Senior stakeholder engagement ...

either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. ...

either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. ...

skills. Desirable: Experience delivering security architecture within Government, Defence or wider Public Sector environments. Knowledge of Government security requirements, including Secure by Design and JSP 440 . Experience working with systems and data subject to Government Security Classification requirements. CISSP or another recognised information security qualification. Experience researching ...

risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills at both the ...

risk treatment in fast-moving projects You have experience working with security control standards and frameworks e.g. ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others You have demonstrable continuous personal development, supported by relevant certifications and accreditations You have good interpersonal skills at both the ...

principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, HMG Security Policy Framework, and other relevant Defence and industry standards. Ability to operate across multi-vendor security ecosystems, selecting and integrating ...

principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, HMG Security Policy Framework, and other relevant Defence and industry standards. Ability to operate across multi-vendor security ecosystems, selecting and integrating ...

NIST, CAF and ISO27001. Knowledge of defence security policies and frameworks such as Defence ones JSP 440 (Defence Manual of Security); JSP 604 (Defence Cyber Security Framework); UK Gov/MoD Secure by Design Familiarity with managing supply chain security through MOD DEFSTANS, ISNs and adherence ...

the NDH(D) service to enhance the service wrap Governance & Assurance Ensure compliance with NDH(D) policies and procedures, and relevant MOD regulations (e.g., JSP 453/JSP 440) Support audit activities and maintain accurate records as required Ensure effective operation of change and configuration management processes … tools (eg JIRA, Confluence) Data analysis and dashboard/report creation Strong communication and documentation skills Desirable ITIL 4 Foundation Knowledge of Defence Digital, JSP guidelines, and secure environments Experience of Major Incident coordination Experience of implementing process development and maturation to support a complex and evolving service. Behaviours ...

Hands on experience with security technologies such as firewalls, intrusion detection systems, encryption etc. Standards & Frameworks Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber ...

technologies. Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453). Experience conducting and managing security assurance and accreditation activities for Defence capabilities or experience delivering cyber security consultancy in OT environments (e.g. ...

automated deployment . Experience working with Government or Defence organisations. Knowledge of UK Government security requirements such as Secure by Design and JSP 440 . CISSP or equivalent security qualification is desirable. ...

acceptance. A track record developing assurance strategies and plans in UK Defence. Credibility across both the digital and cyber domains, including working proficiency in JSP 453 (604) and JSP 440. The confidence to challenge senior technical stakeholders at formal reviews and hold a position with evidence behind it. … Chartered, PRINCE2 Practitioner or MSP. Systems engineering background or INCOSE certification, particularly on equipment programmes. Secure by Design delivery experience under JSP 440 Leaflet 5C. Experience with NCSC CAF, Def Stan 05-138 and 05-139. CCP, CIISec membership, or UK Cyber Security Council registration. Clearance ...

technologies. Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453). Experience conducting and managing security assurance and accreditation activities for Defence capabilities or experience delivering cyber security consultancy in OT environments (e.g. ...

platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate … vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. Collaborate … vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

TOGAF Strong understanding of threat modelling, risk assessment and secure-by-design principles Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security Policy Framework and other Defence and industry standards Ability to work across multi-vendor security ecosystems, selecting and integrating the ...

language for senior stakeholders and decision-makers High standards in written report and/or design documentation. Desirable experience includes: Knowledge of MOD policies (JSP 440, 453/604, 892). Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments Relevant ...

architecture or technical cyber roles Strong background in networks, infrastructure, and secure system design Experience delivering into central government or regulated environments Knowledge of JSP 440/604, security accreditation, and assurance SC clearance (or eligible) TOGAF Why apply? You'll work on nationally significant programmes, gain exposure ...

architecture or technical cyber roles Strong background in networks, infrastructure, and secure system design Experience delivering into central government or regulated environments Knowledge of JSP 440/604, security accreditation, and assurance SC clearance (or eligible) TOGAF Why apply? You’ll work on nationally significant programmes, gain exposure ...

ATAK) to backend services. Secure by Design (SbD) Implementation: Write clean, well-tested code following NCSC Secure Development Principles, NCSC Cloud Security Guidance, and JSP 440 controls. CI/CD & DevSecOps: Automate build, test, and containerisation pipelines (Docker, GitOps, GitLab CI/GitHub Actions) for both air-gapped ...

with UK Ministry of Defence Cyber Security Model, including UK Government Security Classifications DefStans (05-138 at a minimum) Cyber Secure by Design (including JSP 440’s Cyber Secure by Design guidance and/or JSPs 453 and 604) Defence Information Protection Notices (DIPNs) Industry Security Notices (ISNs ...

listed RequirementsExperience with UK Ministry of Defence Cyber Security Model, includingUK Government Security ClassificationsDefStans (05-138 at a minimum)Cyber Secure by Design (including JSP 440's Cyber Secure by Design guidance and/or JSPs 453 and 604)Defence Information Protection Notices (DIPNs)Industry Security Notices (ISNs ...