10 of 10 HMG Security Policy Framework Jobs in the UK excluding London

Tech to connect them with exceptional professionals for this role. Made Tech helps UK government and public sector organisations build better digital services — and security is central to that mission. As a Lead Security Assurance Engineer in our Cyber practice, you'll be the most senior security assurance voice on client engagements, setting the technical direction for how organisations identify, assess, and respond to security risk. You'll work across complex government programmes where the stakes are real: services that affect citizens, systems that hold sensitive data, and teams that need to move quickly without ...

Tech to connect them with exceptional professionals for this role. Made Tech helps UK government and public sector organisations build better digital services — and security is central to that mission. As a Lead Security Assurance Engineer in our Cyber practice, you'll be the most senior security assurance voice on client engagements, setting the technical direction for how organisations identify, assess, and respond to security risk. You'll work across complex government programmes where the stakes are real: services that affect citizens, systems that hold sensitive data, and teams that need to move quickly without ...

Conduct and manage security risk assessments, mitigation planning and ongoing threat analysis Ensure compliance with: HMG Security Policy Framework (SPF) and GovS 007 NPSA guidance Loss Prevention Standards (LPS) Oversee access control, CCTV, perimeter protection and intrusion detection systems Maintain compliance with Facility Security … Manager or Physical Security leadership role within: Data centres Critical national infrastructure Government or defence environments Strong working knowledge of: HMG SPF and GovS 007 Security risk management frameworks NPSA guidance and LPS standards Experience working within regulated or high-security environments Understanding of Facility ...

Contract Role – DV Cleared Security Architect – London/Hybrid – 06 months initial – Inside IR35 As Security Architect you will have the capability to deal with complex, sometimes unique situations, which will require deep technical expertise and the ability to communicate complex security concepts to both technical … processes at a national level at all Government security Classification (GSC) levels. Understanding of the Cabinet Office Security Policy Framework (SPF), and knowledge of security policy at the higher security classifications. Experience - Desirable Experience of working within the Policing sector. Cyber/Information ...

highly user-focused and successful digital services, ensuring governance standards are adhered to. Implement toolkits and APIs for purposes such as integration, performance optimisation, security, and scalability. Explore innovative ways to solve problems, working in a fail-fast … fashion to provide required functionality. Apply HMG IA technical security controls according to ISO 27001 & the Security Policy Framework (SPF). Required Skills & Qualifications: Significant experience in delivering technical solutions as part of large projects. Proficient with modern delivery models such as Scrum and Agile. ...

Product Security Engineer will work closely with Project Teams across engineering, product development and quality assurance to integrate SbD principles and security best practice throughout the product lifecycle. The Product Security Engineer performs a critical Product Support role across multiple projects, usually during product development employing Secure … maintaining customer artefacts through life as required. Reporting to the Supportability Engineering Functional Lead, this role covers both Drumgrange sites and ensures that Product Security Assurance and supporting artefacts are accurately produced and delivered, to meet customer requirements. Anticipating that systems will be attacked or misused, Project Security ...

experienced Security professional looking to make a real impact within Defence and Aerospace? We're recruiting on behalf of a growing SME working across the full product design lifecycle, where you'll play a critical role safeguarding cutting-edge products and systems. About the Role As Product Security Engineer, you'll work closely with Project Teams across engineering, product development and quality assurance to embed Secure by Design (SbD) principles and security best practice throughout the product lifecycle, producing and delivering Product Security Assurance artefacts to meet customer requirements. What You'll Be Doing Undertaking ...

Information Officer Date: 16 Mar 2026 Location: Gatwick, GB Salary: Up to £175,000 per annum dependent upon experience Contract Type: Permanent – Full Time Security Level: SC Base Location: Aviation House, Gatwick We are the UK's aviation and aerospace regulator and recognised as a world leader … setting the direction for a secure, innovative, and cost-effective technology estate that supports organisational priorities and service delivery. Oversee information governance and cyber security, ensuring data protection and compliance with best practices and regulations. Drive digital transformation, championing user‐centred design and the use of technology to improve ...

technology domains, including Operational Technology (OT), Information Technology (IT), Technical Architecture, and Supply Chain. This role focuses on evaluating the effectiveness of cyber security controls, identifying areas of risk management, and ensuring that appropriate mitigation strategies are in place. Working under the direction of the Cyber Assurance Principal Advisor … certifications (e.g., ISO 27001 Auditor, CISA, GIAC) Desirable: Experience in the nuclear or CNI sector; familiarity with ONR SyAPs, NISR 2003, and HMG SPF; experience with assurance tooling or evidence management platforms What's on offer Annual bonus of up to 15%, made up of company and personal performance ...

regulated or critical infrastructure environment. Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF. Degree or equivalent in cyber security, risk management, or a related field. Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager). Desirable Experience in the nuclear or CNI sector. … Familiarity with ONR SyAPs, NISR 2003, and HMG SPF. Experience with risk quantification or risk tooling platforms. Context and Challenges This role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping ...