14 дней назад
Security Assurance Lead (Defence and Aerospace)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Assurance Lead (Defence and Aerospace): Conducting security design reviews, risk assessments, and assurance activities for defence and aerospace IT programmes with an accent on security controls, compliance, threat modelling, and certification. Focus on evaluating architectures, identifying residual risks, validating control implementation, and communicating security recommendations to joint design teams and customers.
Location: Hampshire, United Kingdom; onsite 5 days per week. Candidates must have the right to work in the United Kingdom and meet applicable UK Government, contractual, residency, personnel security, and potentially nationality requirements.
Company
delivers IT services and supports defence, aerospace, government, and enterprise programmes.
What you will do
- Lead security design reviews and assessments of IT architectures, design documentation, threat models, and security specifications.
- Identify control gaps and residual risks, develop risk matrices, and recommend mitigation strategies.
- Verify compliance with Defence Security Policy, Classification Guides, ITAR, export control requirements, IS1, and related standards.
- Provide security guidance during joint design team meetings, architecture workshops, and customer decision-making.
- Validate security control implementation, review test plans, and support certification and accreditation activities.
- Prepare assessment reports, security control specifications, compliance matrices, executive summaries, and audit evidence.
Requirements
- Experience in information security, security assessment, or security assurance roles.
- Demonstrated experience conducting security design reviews and assessments.
- Background in defence, aerospace, or government security programmes.
- Experience with security certification and accreditation processes, including team management in a security or joint design team function.
- Strong knowledge of network, infrastructure, application, and data security, IT architecture, threat modelling, and risk assessment.
- Knowledge of ITAR, export controls, ISO 27001, NIST CSF, and common security frameworks.
Culture & Benefits
- Inclusive and supportive environment for diverse, underrepresented, and neurodivergent candidates.
- Reasonable adjustments are available throughout the hiring process.
- Work model prioritizes in-person collaboration while supporting flexibility, wellbeing, productivity, and individual work styles.
- Community and strong professional connections are emphasized.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →