Location: Predominantly remote, with ad hoc claimable travel to Bristol and Belfast, plus occasional travel to Spain and supplier sites if/as required.
Security Clearance: Active SC required (DV also considered)
Rate: Competitive market rates, dependent on experience

We're recruiting an experienced Product Security Lead to support the Fleet Solid Support (FSS) Programme, playing a key role in delivering Product Security across a major UK maritime defence programme.

Working across a complex engineering environment, you'll be responsible for defining, implementing and assuring the Product Security strategy, ensuring cyber security, information assurance and Secure by Design principles are Embedded across both the vessel platform and supporting IT/OT architecture throughout the programme life cycle.

This is an opportunity to take ownership of Product Security delivery, working closely with engineering, cyber security, customers and suppliers to support the successful delivery of a high-profile defence capability.

• Lead Product Security delivery across the programme.
• Deliver Product Security contract deliverables.
• Own and maintain the Security Management Plan and Physical Security Management Plan.
• Manage Product Security Owners across programme assurance activities.
• Coordinate the TEMPEST solution alongside specialist resources.
• Manage Product Security risks and support Contract Change Requests.
• Represent Product Security at Security Working Groups.
• Coordinate with engineering, cyber security, facilities and supply chain partners to resolve Product Security matters.
• Oversee Factory Security Testing and remediation of identified vulnerabilities.
• Maintain the programme Asset Database.

• Significant Product Security or Cyber Security experience within UK defence maritime environments.
• Experience working within MOD or defence regulatory frameworks.
• Experience applying security accreditation and Secure by Design within UK MOD programmes.
• Experience delivering security solutions for naval or auxiliary vessels.
• Experience securing complex IT/OT systems.
• Strong understanding of network architecture and secure systems engineering.
• Experience with trust boundaries, cross-domain security and multi-domain security solutions.
• Experience applying TEMPEST measures, including Def Stan 08-050, Def Stan 59-411, NCSC GPG14 and SDIP-29.
• Knowledge of handling highly classified environments, including STRAP.
• Experience working with JSP440, JSP453, JSP604, Defence Standards, NCSC guidance and the NIST Risk Management Framework.

• Experience working within change-controlled environments.
• Project delivery across multiple internal and external stakeholders.
• Experience transitioning from traditional accreditation to Secure by Design certification.
• Experience co-ordinating or overseeing Penetration Testing and/or Factory Security Testing.
• Knowledge of maritime systems and shipboard integration.
• Chartered Engineer (CEng), CISSP, CISM or equivalent certification.