System Security Officer

Job summary

Are you an experienced cyber security professional looking to play a key role in protecting critical military Information Systems and communications networks?

We are seeking a motivated and proactive System Security Officer (SSO) to support the secure delivery and operation of Communications and Information Systems (CIS) and IT-enabled capabilities in MOD. Working within a dynamic environment, you will provide security assurance and risk management support to ensure systems are delivered and operated in accordance with MOD policy and Secure by Design principles.

This is an exciting opportunity to work with a wide range of technical and operational stakeholders, helping to manage cyber security risks across a diverse portfolio of projects and capabilities.

This position is advertised at 37 hours per week.

Due to the nature of the role, part time and job share arrangements may be considered, subject to the requirement that business needs are met.

Job description

As a System Security Officer, you will work closely with project teams, assessors and security specialists to ensure systems meet information assurance requirements while balancing operational and business needs.

The successful candidate will have a sound understanding of cyber security risk management and an ability to communicate complex security requirements to both technical and non-technical audiences.

Key Responsibilities

You will:

• Support the secure delivery and operation of communications networks and IT projects in line with MOD security policy and Secure by Design principles.
• Work collaboratively with System Owners, Security Assessors and Delivery Team Security Leads to assess and assure information systems.
• Identify, assess and document security risks, ensuring appropriate mitigations are implemented and residual risks are managed effectively.
• Provide security advice and guidance to project teams and stakeholders throughout the system lifecycle.
• Monitor compliance with mandated security standards, policies and assurance requirements.
• Lead on the investigation of security incidents and breaches, contributing to lessons identified and implementation of control improvements.
• Take a lead role in security governance forums and working groups.
• Help maintain and improve security management processes, documentation and assurance activities across the organisation.
• Promote a positive security culture and encourage best practice across teams.

Person specification

We are looking for someone who can understand security risks within complex IT and communications environments and work effectively with stakeholders to deliver practical security solutions.

You will be organised, collaborative and capable of balancing security requirements with operational and business needs.

In order to achieve the requirements of this position, it is essential the candidate has the following skills:

• Experience of cyber security, information assurance or information risk management within an ICT or CIS environment.
• Experience of identifying, assessing and managing security risks.
• Knowledge of security assurance processes and security documentation, such as Secure by Design or similar risk management artefacts.
• An understanding of security policies, standards and governance frameworks such as NIST Cybersecurity Framework (CSF) and ISO27001.
• Strong communication and stakeholder engagement skills.
• Experience of producing clear written reports, risk assessments and security documentation.
• The ability to analyse information and make evidence-based recommendations.
• Experience of working collaboratively across multiple teams and disciplines.

It would be beneficial, but not required, if you have:

• Experience within Defence, Government or a regulated environment.
• Experience supporting security incident management activities.
• Knowledge of MOD Security related policies.
• Relevant qualifications such as CISMP, CompTIA Security+, CCP, CISSP, CISM or similar.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Changing and Improving
• Communicating and Influencing
• Working Together

We only ask for evidence of these behaviours on your application form:

• Making Effective Decisions

Benefits

Alongside your salary of £37,720, Ministry of Defence contributes £10,927 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• 25 days paid annual leave rising to 30 days on completion of 5 years’ service
• Flexible working options- we understand the importance of adapting work to your life.
• Learning and development tailored to your role
• A culture encouraging inclusion and diversity
• A Civil Service pension with an employer contribution of 28.97%

Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work in another MOD workplace, will also count towards this level of office attendance. Applicants can request further information regarding how this and other flexible working arrangements may work in their team from the Vacancy Holder (see advert for contact details). Defence Business Services cannot respond to any questions about working arrangements.

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a numb