Product Security Consultant Full Time

Matchtech

You will act as the security expert for product development, encompassing elements of cyber security, and will provide key expertise in integration, test, and compliance activities.

Key Responsibilities:

• Acting as the company expert for all matters of product-related cyber security, ensuring confidentiality, integrity, availability, and reputation are maintained
• Supporting the development and maintenance of company security policies
• Managing the company Information Security Management System (ISMS)
• Consulting across development projects, including reviews, risk analysis, and identification of mitigation activities
• Executing risk treatment plans following security risk assessments to ensure appropriate and managed security controls
• Participating in customer working groups as needed
• Negotiating and ensuring compliance with customer security requirements
• Owning and reviewing security documentation
• Managing security assessments and IT Health Checks (ITHCs) during product development
• Defining security test strategies and conducting verification and compliance assessments
• Contributing to and presenting at design reviews

Job Requirements:

• Proficiency in security standards applicable to cyber security-related products
• Ability to perform vulnerability analysis, assess, and manage risks
• Capability to verify and enforce compliance with all security requirements through ISMS audits and verification campaigns
• Ability to produce high-quality documentation that serves as the foundation of security architecture design and verification
• Strong communication skills across all levels of the organisation, as well as with customers and suppliers
• Ability to work effectively independently or as part of a team, in both leadership and supporting roles
• Understanding of UK NCSC guidelines and secure by design principles relevant to UK MOD
• DV or SC Clearance as relevant for 2023 or 2024

Qualifications and Experience:

• Experience in the industry
• Knowledge of ISO/IEC 27000 standards, including ISMS and information security risk management
• Experience in avionics and/or defence industries advantageous
• Knowledge of information security techniques relevant to communication systems or the Internet beneficial
• Experience with ITHC beneficial, ideally NCSC CHECK penetration testing
• Understanding of the NIST Cybersecurity Framework beneficial
• Familiarity with UK or US military and government security standards beneficial

Benefits:

• Competitive salary
• Opportunity to work on a variety of challenging and innovative projects
• Professional development and training opportunities
• Supportive and collaborative work environment
• Comprehensive employee benefits package

If you are a proficient Product Security SME seeking a role that allows you to utilise your expertise in the defence and security sector, we encourage you to apply now and join our client’s dynamic and talented team in Buckinghamshire.