App Service). Security Frameworks & Secure by Design Strong understanding of Secure by Design principles and ability to bake security in from concept through production. Practical experience implementing the NCSC or NIST Cybersecurity Framework (CSF) and/or NIST SP 800-53 controls. Demonstrable understanding of ISO/IEC 27001 requirements and hands-on experience mapping technical controls to ISO More ❯
Bath, Somerset, United Kingdom Hybrid / WFH Options
Bmt Defence Services LTD
which are critical to UK defence and national security. To deliver this outcome, you must be passionate about cybersecurity and apply your deep understanding and experience of HMG, NCSC, and international cyber standards. The role will require excellent stakeholder management and communication skills to build the trust and support necessary for successful outcomes. You will be supported by team More ❯
Almondsbury, Gloucestershire, United Kingdom Hybrid / WFH Options
Advance TRS
/Certified Information Security Manager (CISM) or equivalent. Associate/Full Membership of recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS, CIISEC. NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST 800-37 Risk Management Framework. A keen More ❯
Bristol, Almondsbury, Gloucestershire, United Kingdom Hybrid / WFH Options
Advance TRS
/Certified Information Security Manager (CISM) or equivalent. Associate/Full Membership of recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS, CIISEC. NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST 800-37 Risk Management Framework. A keen More ❯
Bristol, Avon, South West, United Kingdom Hybrid / WFH Options
Advance TRS
/Certified Information Security Manager (CISM) or equivalent. Associate/Full Membership of recognised security professional body such as the Institute of Information Security Professionals (IISP), IS2, BCS, CIISEC. NCSC Certified Cyber Professional/CESG CCP (Security and Information Risk Advisor or Security Architect). Understanding of 'Secure by Design' methodology and NIST 800-37 Risk Management Framework. A keen More ❯
persuade, influence and motivate others, with the right sense of urgency, without having formal authority. Building External Relationships: partner relationships with other SOCs (peers, customers and vendors) and NationalCyberSecurityCentre operations Basic understanding of security methodologies and processes, and/or networking knowledge. knowledge of current real world cyber-attacks and impacts and how this could relate to More ❯
Corsham, Wiltshire, United Kingdom Hybrid / WFH Options
Experis
on secure cloud adoption, data protection, and architectural risk management Conduct security assessments, identifying risks and proposing effective mitigation strategies Ensure compliance with MOD policies, including JSP 440, and NCSC cloud security principles Work closely with delivery teams, architects, and senior stakeholders to embed security throughout the solution lifecycle Support security assurance and accreditation activities for cloud-based systems Essential More ❯
Corsham, Wiltshire, United Kingdom Hybrid / WFH Options
Experis - ManpowerGroup
on secure cloud adoption, data protection, and architectural risk management Conduct security assessments, identifying risks and proposing effective mitigation strategies Ensure compliance with MOD policies, including JSP 440, and NCSC cloud security principles Work closely with delivery teams, architects, and senior stakeholders to embed security throughout the solution lifecycle Support security assurance and accreditation activities for cloud-based systems Essential More ❯
Corsham, Wiltshire, United Kingdom Hybrid / WFH Options
Experis
on secure cloud adoption, data protection, and architectural risk management Conduct security assessments, identifying risks and proposing effective mitigation strategies Ensure compliance with MOD policies, including JSP 440, and NCSC cloud security principles Work closely with delivery teams, architects, and senior stakeholders to embed security throughout the solution lifecycle Support security assurance and accreditation activities for cloud-based systems Essential More ❯
Stratford-upon-avon, Warwickshire, United Kingdom Hybrid / WFH Options
Ccl Solutions Group
minimum of 5 years. Full UK driving licence. Ability to obtain (or currently hold) SC or DV clearance - this is non-negotiable and is set by the NSCS (NationalCyberSecurityCentre ) for all Check Members. Willingness to travel for client engagements or on-site support. Travel is within the United Kingdom. CCL is an equal opportunities employer and positively More ❯
Yeovil, Somerset, United Kingdom Hybrid / WFH Options
Leonardo UK Ltd
It would be nice if you had: Excellent understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance You must be eligible for full security clearance. For more information and guidance please visit … including Defence, Telecommunications, Energy and Finance to help secure national infrastructure and commerce in the UK and beyond. Our Practice is certified by the UK NationalCyberSecurityCentre (NCSC) in the provision of advice and guidance to our customers. At Leonardo UK, we believe that a diverse and inclusive work environment unlocks our people's full potential and drives More ❯
Gloucester, Gloucestershire, United Kingdom Hybrid / WFH Options
BAE Systems (New)
Managers producing truly world leading solutions that provide content and network threat defence between networks of different security classifications or trust levels. Our capability is developed in collaboration with NCSC, ACSC and NCDSMO and we have been doing this for over 20 years. This enables our clients in Intelligence Agencies, Law Enforcement, Military and Critical National Infrastructure to move information More ❯
Wiltshire, South West, United Kingdom Hybrid / WFH Options
Network IT
and artefact development across all SECRET Cloud platforms. Support network security assurance for current and future SECRET Cloud services. Develop compliant technology designs aligned with MOD 604, 440 governance, NCSC, and industry best practices. Produce High- and Low-Level Designs for integrating Tier 2 Hyperscale Cloud onto the Defence Network. Collaborate with supplier and cross-government network leads. Specialise in More ❯
networks Ability to interpret Functional Design Specifications, control philosophies and engineering drawings Experience working within regulated environments (e.g. water, energy) Awareness of OT cybersecurity standards like IEC 62443 and NCSC guidance Bonus points if you’ve had exposure to OT/IT convergence, digital transformation, or asset management tools Why Join? Be part of a forward-thinking transformation in one More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Babcock Mission Critical Services España SA
the Security Lead Relevant experience of the Maritime Defence and MOD IT Domain, including knowledge of Government/MOD IA policy and process including JSP440, JSP453, JSP628, DIANs and NCSC IA guidance. Able to demonstrate the application of contextualised risk management in the application of technical/procedural/physical security controls within the risk/cost/benefit space. … Owner forms, Supplier Assurance Questionnaires. Experienced in relevant Security Policy and CyberSecurity Frameworks including the GovS 007, MOD Secure by Design (SbD), ISO27001 - Information Security Management Systems, NIST, NCSC IA Guidance Qualifications for the CyberSecurity Lead Educated to degree level or holds a relevant professional qualification or equivalent experience. Security Clearance The successful candidate must be able to More ❯
Bristol, Gloucestershire, United Kingdom Hybrid / WFH Options
Babcock Mission Critical Services España SA
CyberSecurity Lead: Relevant experience of the Maritime Defence and MOD IT Domain, including knowledge of Government/MOD IA policy and process including JSP440, JSP453, JSP628, DIANs and NCSC IA guidance. Able to demonstrate the application of contextualised risk management in the application of technical/procedural/physical security controls within the risk/cost/benefit space. … Owner forms, Supplier Assurance Questionnaires. Experienced in relevant Security Policy and CyberSecurity Frameworks including the GovS 007, MOD Secure by Design (SbD), ISO27001 - Information Security Management Systems, NIST, NCSC IA Guidance Qualifications for the IS & CyberSecurity Lead: Educated to degree level or holds a relevant professional qualification or equivalent experience. Security Clearance The successful candidate must be able More ❯
team of infrastructure and DevOps engineers Build secure, scalable infrastructure (Windows/Linux, VMs, containers) Drive CI/CD, automation, and Infrastructure as Code practices Ensure compliance with NIST, NCSC, CIS, JSP, and ISO 27001 Oversee backup, DR, and business continuity strategies Maintain strong cyber hygiene and proactively manage vulnerabilities Create documentation and a knowledge-sharing culture Work cross-functionally … on expertise with strategic oversight. Essential Experience & Skills: Proven experience in secure IT infrastructure & DevOps leadership Strong technical background in systems administration & automation Solid grasp of compliance frameworks (NIST, NCSC, JSP) Excellent communication and stakeholder management Tech Stack You'll Work With: OS: Windows Server, Hardened Linux Containers/Orchestration: Docker, Kubernetes, Portainer DevOps Tools: Jenkins, Artifactory, Jira, Azure DevOps More ❯