Essential Skills and Experience
• Proven demonstrable experience operating in a security risk role or working within a Cyber Security Framework such as the NIST RMF or CSF.
• Detailed knowledge and understanding of defence policy and standards, particularly JSP 440, 453 and over-arching policy.
• Experience of producing Security Management Plans, Security Instructions, and other security policy related documentation.
• Knowledge of security risk reduction policies, processes, and procedures such as Incident Response, Vulnerability Management and Patch Management.
• Delivery of Risk Assessments, Risk Treatment Plans, scoping and managing IT health checks and associated remediation activities.
• Experience in stakeholder management and communication, particularly inside of Defence or wider Government.
Desirable Skills
• Professional registration with an appropriate licencing body such as Chartered IT Professional, Incorporated or Chartered Engineer or Principle or Chartered Cyber Security Professional.
• Relevant Cyber Security certification such as CISSP, CGRC, CISM or CRISC.
Our dedicated team would be pleased to discuss in more detail how we may be able to help