Senior Security Risk Advisor (CESG Certified IA Professional)

Michael Bailey Associates; Aldermaston; On-site; GBP 60,000 - 100,000; Full time

Job description

Role: Senior Cyber Security Architectural Lead
Location: Aldermaston - full time on site

Minimum Requirement:

Security Clearance: DV
Interview Process: TBC

12 Months contract + possible extension

Job Purpose:
To provide specialist information security oversight, advice and guidance on projects and functions on all aspects of information security in order to provide assurance that functions on all aspects of information security and/or classified information assets, materials and/or equipment are subject to an acceptable risk management regime.

Key Accountabilities:

1. Provide analysis of risks to information systems in order to inform risk owners and project managers to allow effective decision making.
2. Provide expert subject matter advice to CISO and other elements of the IS management chain.
3. Ensure IT projects are provided with timely technical security advice.
4. Develop and apply the overall security architecture of the organisation and the place within it of key security controls.
5. Maintain and promote high personal standards in environment, safety, health, security and quality and be a great team player.

Key Responsibilities:

1. Work with functions, projects and the supply chain to assess the sources of Information Risk and make recommendations on how these are to be managed.
2. Provide the lead for maintaining awareness and industry best practice in Information Assurance and Information Risk Management.
3. Determine how the overall security architecture applies to projects under consideration and advise project solution architects on security requirements.
4. Review high and low level solution designs for compliance with overall security architecture, achievement of security requirements and overall efficacy of the security features and tools.
5. Facilitate the formal accreditation of corporate systems and of other specified systems.
6. Oversee IT Health Check and Vulnerability Assessments by approving scope of tests and overall testing programme.
7. Record and track assessments of information capability and projects supporting reviews and audits as necessary.
8. Provide technical risk assessment analysis.
9. Develop the professionalism of Information Risk Management within AWE.
10. Attend project Security Working Groups and manage when appropriate.

Criteria:

1. Strong cyber security architect
2. Familiar with security tools
3. Has worked in a defence industry previously
4. Has had hands-on experience in security applications and/or appliances
5. Security Architect skills

Good working knowledge of the following:

1. Firewalls
2. DevOps
3. Cloud
4. Intrusion detection systems (IDS)
5. Intrusion prevention systems (IPS)
6. Experience more important than qualifications
7. Has worked in highly classified environments
8. Technical background
9. Endpoint detection

Technologies:

1. SEAM
2. Darktrace
3. Sentinel - 365 Tools
4. Elastic/ELK Stack

If you are interested please apply with your most up to date CV.

Michael Bailey International is acting as an Employment Business in relation to this vacancy.