14 of 14 JSP 440 Jobs in the UK

will ensure systems meet MOD security assurance requirements, supporting Secure by Design (SbD), cyber risk management and security control implementation in line with JSP 440, JSP 604 and NIST methodologies. Working closely with project teams, security architects, engineers and wider Defence security functions, you will coordinate assurance … produce the evidence required to demonstrate compliance. Key Responsibilities Provide security assurance advice and guidance in line with MOD Secure by Design principles and JSP 440. Conduct security risk assessments using NIST 800 methodologies and manage associated mitigation actions. Develop security documentation, assurance evidence, security operating procedures (SyOPs ...

function and a direct influence on new capability for defence. Responsibilities Lead Secure by Design for the product across defence deployments, in line with JSP 440 and JSP 453 Develop assurance cases using a claims, arguments and evidence approach, built to keep pace with rapid agile delivery … similar methods CISSP certification Active SC clearance and eligibility for DV Desirable Experience Experience assuring AI or machine learning systems, or knowledge of JSP 936 Understanding of AI attack types such as prompt injection, data poisoning and agent tool misuse, including MITRE ATLAS Familiarity with NCSC secure AI guidance ...

standards, NIST frameworks and associated risk management practices. Understanding of legacy information assurance standards and NCSC guidance. Familiarity with MOD security frameworks, such as JSP 453, JSP 440, JSP 902 and DEFCON 659A. Technical knowledge spanning defensive cyber security, enterprise architecture, secure systems, network and cloud ...

either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. ...

either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. ...

either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. ...

skills. Desirable: Experience delivering security architecture within Government, Defence or wider Public Sector environments. Knowledge of Government security requirements, including Secure by Design and JSP 440 . Experience working with systems and data subject to Government Security Classification requirements. CISSP or another recognised information security qualification. Experience researching ...

principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, HMG Security Policy Framework, and other relevant Defence and industry standards. Ability to operate across multi-vendor security ecosystems, selecting and integrating ...

principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, HMG Security Policy Framework, and other relevant Defence and industry standards. Ability to operate across multi-vendor security ecosystems, selecting and integrating ...

principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards, frameworks, and regulatory requirements, including NIST, ISO 27001, JSP 440, HMG Security Policy Framework, and other relevant Defence and industry standards. Ability to operate across multi-vendor security ecosystems, selecting and integrating ...

testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher level recognised and current Information ...

TOGAF Strong understanding of threat modelling, risk assessment and secure-by-design principles Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security Policy Framework and other Defence and industry standards Ability to work across multi-vendor security ecosystems, selecting and integrating the ...

architecture or technical cyber roles Strong background in networks, infrastructure, and secure system design Experience delivering into central government or regulated environments Knowledge of JSP 440/604, security accreditation, and assurance SC clearance (or eligible) Why apply? You'll work on nationally significant programmes, gain exposure ...

would be nice if you had: Red Hat experience. Working knowledge of radio technologies, in particular ROIP. Familiarity with networking technologies. Knowledge of JSP440 security guidelines. Knowledge/Experience working within an MBSE environment. Experience of working with industry partners and platform integrators to support platform integration and installation. Location ...