SC Cyber Security Consultant

Role: Cyber security consultant
Organisation: Defence Digital, Ministry of Defence
Role Location: Corsham, Wiltshire (Hybrid)
Duration: 16 months
Contract Day Rate: £600
Status: Inside IR35
Latest start date: Monday 23 January 2023
Clearance: SC Clearance will be required before start date
Certes Ref: 80910


Summary of the work
Act as principal SA professional working closely with Service Manager/Service Stakeholders.
MSP/Authority SA governance to achieve accreditation and through life management of all live services.
Establish/Chair Security Working Groups.
Review/assess/address/evidence security controls.
Support live services with production of a formal document (maintained in line with policy standards and reviewed annually).
About the work
Early market engagement

Who the specialist will work with

Civilian, Military and contractors within the MOD and wider Defence industry.

What the specialist will work on

The Security Assurance Co-ordinator (SAC)/ Security Lead (SL) will be the main focal point for all Security Assurance related support tasks; dependant on the business needs. Checks and balances must be maintained and monitored in accordance with policy and standards; supported by the production of a formal document set to achieve accreditation or Safe by Design and adhere to the MoD Secure By Design principles 'An approach that enables a culture of proactive risk management and appropriate security consideration throughout a capabilities' lifecycle by connecting cyber security principles, roles, processes, tools and techniques to achieve secure systems.'

Work setup
Working arrangements
A mixture of onsite and working from home at 7.5hr days, 4 to 5 day weeks - maximum 220 days per calendar year in order to support project teams or 110 days per 6 months.
Security clearance
Valid SC clearance as a minimum must be in place prior to the contract starting and for the duration of the contract due to the projects the individual is required to work with.
Skills and experience
Essential skills and experience
* Please provide evidence of a minimum of three years' experience within the last five years in an Information Assurance (IA) role in a similar sized Ministry of Defence organisation 10%
* Please provide an example of a high- level plan to your approach for identifying/managing Security Risks, Issues and Dependencies in mature business/project area, including evidence of managing RMADS/TSIs 10%
* Please provide an example of how you have provided SA documentation to enable an organisation to continue the route to full rollout and adoption of policies/templates within delivery areas 10%
* Please demonstrate experience of conducting Technical security reviews / approvals of Supplier and MoD Design and Test documentation to ensure that it is compliant with Defence Security policy 10%
* Please can you demonstrate experience of Defence Digital and/or MOD Security Accreditation and MOD Security Assurance process 10%
* Please can you demonstrate previous working experience of Coordinating technical security documentation in support of CyDR (previously ISS DAIS) to support achievement of accreditation 10%
* Please can you provide evidence of certified Cyber Professional (CCP) - at least SIRA Practitioner level before advert end date. 10%
Nice-to-have skills and experience
* Please provide evidence of certified Information Systems Security Professional (CISSP) Qualification or Certificate in Security Management (CISM) before advert end date. 5%
* Please provide evidence of being an Associate Member of the Chartered Institute of Information Security (CIISEC) before advert end date. 5%
* Please can you provide evidence of being a Member of the British Computer Society. 5%
* Please can you provide evidence of experience of ICT Projects in a similar sized organisation 5%
* Please can you provide evidence of experience of knowledge of JSP440 & JSP604 5%
* Please can you provide evidence of specific project experience such as cloud security, apps security 5%
Cultural fit criteria
* Please can you provide evidence of experience of delivery in a complex defence IT environment, understanding the challenges and approaches to delivery (25%)
* Please give an example of a time you have worked as a team with our organisation and other suppliers, including knowledge & experience of scaled Agile ways of working (25%)
* Please can you give an example of a time you have remained transparent and collaborative when making decisions (25%)
* * Please can you give an example of excellent communication, presentation, collaboration and client/stakeholder engagement skills with a wide variety of grades/positions. (25%)
Additional assessment methods: Interview

Evaluation weighting
Technical competence - 50%
Cultural fit - 5%
Price - 45%

Certes Computing (and all of its subsidiary companies) is committed to promoting equality and diversity in its business operations.