Principal Security Assurance Coodinator

Leonardo UK
Job Description:

Principal Security Assurance Coordinator

Leonardo protects institutions, enterprises and citizens, guaranteeing the security of digital ecosystems and the resilience of strategic assets through services for the secure digitalisation of processes, infrastructure and applications, technologies and solutions for mission and business critical communications , as well as systems and platforms for constantly monitoring and responding to both physical and cyber threats.

Job Description

Leonardo is one of top ten largest defence companies globally, we make everything from helicopters to radios and have significant technological investment and products across Defence, Transport, Energy, Aerospace, Space and Manufacturing.

The Leonardo Cyber & Security Division, one of the three divisions in Leonardo UK, is a pivotal innovator, helping customers deliver and secure their digital transformation. The Cyber & Security Division is at the forefront of supplying technology and services for both civil and defence markets, in both the UK and around the world, to enhance the capabilities of its Customers. Within the Cyber & Security Division is our Cyber Consulting Practice which is where this role is positioned.

Leonardo’s Cyber Consulting practice works across a diverse array of sectors including Defence, Telecommunications, Energy and Finance to help secure national infrastructure in the UK and beyond. Our Practice is certified by the UK NCSC in the provision of advice and guidance to our customers across both enterprise and operational technology across all of the NCSC defined security domains of Governance and Risk Management, Security Architecture and Compliance.

This is a highly rewarding and hands on role helping our customers manage their cyber security risk. With exposure across both traditional and cutting edge enterprise IT as well as bespoke Operational Technology systems with a clear and defined pathway to achieve Chartership, NCSC certification and greater responsibility. Your work at Leonardo will see you inspire and lead in solving customer problems in an agile, innovative and team centric manner. We are after creative, passionate, technically savvy and personable people to help grow our practice and solve some of the most challenging, exciting and critical security challenges to the UK’s digital landscape.

Key Responsibility Areas

• Relate – Our customers and their problem are at the heart of what we do, as a Consultant you will help to actively listen and empathise with our customers to build intimacy.
• Understand – We add value by solving problems, as a Consultant you will help define potential solutions to these problems with only limited information based on your experience and technical knowledge.
• Assess – At Leonardo we adopt a risk based approach to any security problem, as a Consultant you will need to identify, measure and analyse the risks attracted by a given digital system and its information assets through the completion of risk assessments and defining and implementing the enabling governance structures that support this process.
• Treat – Resolving risks is the technical core of our offering, as a Consultant you will assist in defining appropriate and proportionate security solutions right the way across people, process and technology aligned to the identified risk picture through the creation of security architecture visions, patterns and designs. For some customers this may require the implementation of HMG/MOD policy.
• Assure – Giving our customers confidence that security is where it needs to be is a key requirement across heavily regulated industries. As a Consultant you will assist in defining, implementing and performing assessments of our customer’s environment against a given set of criteria spanning people, process and technology.
• Develop – You may need to work with our customers to help them understand how corporate policy changes affect their risk management approach and work with them to develop solutions that are compliant with the latest policy.

Skills, Qualification & Knowledge Required

• A good understanding of TCP/IP based networking concepts across the OSI model layer as well as the common protocols in use and their risks.
• A good understanding of HMG/MOD/NCSC standards and frameworks or industry equivalents and the ability to interpret and apply these to a range of systems.
• Recognised professional certifications in in Cyber Security such as CISM, CISSP, CRISC, CASP, CEH, CCP or a cyber-security related MSc.
• Experience of directly managing project delivery and associated metrics such as time, cost and quality.
• Experience of and ability to manage multiple stakeholders and their needs with empathy, finding an appropriate balance of listening and speaking.
• An ambitious and creative drive to help safeguard UK national infrastructure and become a recognised cyber expert.
• Extensive experience in the development and mentoring of junior team members.
• UK DV Clearance or the ability obtain it.
• An Expert understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005.
• Extensive experience of assessing cyber security risk and building or evolving risk management framework components such as risk measurement criteria.
• Excellent ability to articulate abstract risk based concepts and approaches and its relationship to threat and vulnerability.
• Extensive experience of assessing, defining and implementing security governance frameworks.

Employee Benefits

As part of our commitment to ensuring that Leonardo is a great place to work, the Company provides employees with a generous package of benefits. Employees can choose the right benefits for them, their wellbeing, their family and their lifestyle.

As a Leonardo employee, you would enjoy a very competitive core benefits package. Some of these benefits are outlined below. Core benefits provided by Leonardo include:

• Wellbeing policies such as Custom Working, Work Life Balance, Flexible Working, an Employee Assistance Programme and a Diversity and Inclusion Committee.
• Enhanced Holiday Entitlement.
• Company Funded Pension, Life Assurance and Income Protection.
• Access to a company-funded online benefits portal (Flexible Allowance) to contribute to and manage the benefits of your choice.
• Access to a Lifestyle Account to benefit from health, fitness and self-improvement options.
• An Employee Discounts Portal.
• Learning and Development opportunities, long service and achievement awards.
• An Occupational Health Service.
• A Charity Committee and Joint Consultative Committee.

Primary Location:
GB – London – Whitehall

Contract Type:

Hybrid Working:
Onsite