Overview

Security Architect — 6 month contract — Based in Newport — Offering 85ph Inside IR35

Do you have experience in Secure by Design? Do you have knowledge of MOD security requirements? Do you want to work with an industry-leading company? If your answer to these is yes, then this could be the role for you!

As the Security Architect, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry.

Responsibilities

• Design, develop, and maintain secure system architectures for MOD platforms, applications, and networks
• Ensure alignment with relevant standards and frameworks including; NIST SP 800-53, ISO 27001, JSP 440, DEF STAN 05-138, and NCSC guidance
• Produce and maintain security documentation including; Security Architecture Documents, Security Risk Assessments, and Security Management Plans
• Lead and support secure design reviews and contribute to engineering assurance gates
• Liaise with security stakeholders (MOD, NCSC etc.), Information Assurance teams, and other stakeholders to support security assurance processes
• Collaborate with engineering and development teams to ensure security requirements are met from the outset
• Keep up to date of evolving threat landscapes and propose mitigations aligned with system requirements

Qualifications

• Proven experience in cyber security architecture within a defence, aerospace, or critical national infrastructure environment
• Strong knowledge of MOD security requirements (e.g. JSP 440, JSP 604, DEF STANs)
• Good working knowledge and experience of Secure by Design
• A robust background in security architectures, processes, and both industry and government compliances (e.g. ISO 27001, CE/CE+)
• Solid understanding of systems engineering principles and secure development lifecycles
• Experience developing artefacts to support MOD security assurance
• Hands-on knowledge of risk management frameworks (e.g. HMG IS1/IS2, NIST RMF)
• Excellent communication skills, both written and verbal - able to present to technical and non-technical stakeholders
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• SABSA, TOGAF or equivalent architecture certifications

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!

Disclaimer

Disclaimer: This vacancy is being advertised by Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.