Information Security Advisor

Project overview

Role: Information Security Advisor

We are seeking a highly experienced Information Security Advisor/Cyber Security Specialist to support the CISO and Deputy CISO within a complex, highly secure Defence environment.

The role combines hands-on technical security assurance, cyber risk management, security governance and senior stakeholder advisory responsibilities.

The successful candidate will provide expert cyber security advice, lead security testing and remediation activities, and help strengthen the organization's overall cyber security posture

Responsibilities

Essential/Priority Skills:

• Cyber Security Assurance: Lead network and application security testing, coordinate remediation and work closely with IT suppliers and security assurance teams.
• Cyber Risk Management: Conduct Cyber Risk Assessments, develop Cyber Improvement Plans and provide risk-based security recommendations.
• Security Governance: Develop, review and maintain security policies, procedures, standards and controls.
• Technical Security: Advise on the security of complex IP networks, cloud infrastructure and/or operational technology.
• Third-Party Assurance: Support security assessments, supplier assurance reviews and compliance activities.
• Senior Stakeholder Engagement: Advise the CISO, Deputy CISO and senior leadership on cyber risks, security improvements and strategic priorities.
• Security Strategy: Translate strategic security objectives into practical operational controls and improvements
• Defence/Secure Environment Experience
• previous experience working within defence, government or similarly secure environments.
• Network Security Expertise
• strong knowledge of multi-site IP networks, including their operation, protection and monitoring.
• Cloud/OT Security
• practical experience securing public cloud infrastructure and/or operational technology.
• Cyber Risk Management
• proven experience conducting Cyber Risk Assessments and producing Cyber Improvement Plans.
• Security Assurance & Remediation
• experience overseeing network/application testing, vulnerability remediation and security controls.
• Senior Stakeholder Engagement
• ability to communicate complex cyber risks clearly and influence senior decision
• maker

Project details

Salisbury - 4 days per week onsite (non-negotiable)

12 Months

Role Type: Hybrid - 4 days onsite

• Start: flexible
• Remote: hybrid
• Location: Salisbury, UK, GB
• Languages: English