Cyber Security Technical Delivery Manager in Glasgow

On behalf of the MOD we are looking for a Cyber Security Technical Delivery Manager (Inside IR35) for a 12 month contract. Hybrid working based in Glasgow.

The Ministry of Defence (MOD) is a central government department with a mission to protect our country and provide the ultimate guarantee of its security and independence, as well as helping to protect its values and interests abroad. The Ministry of Defence is looking to engage a security professional to provide technical delivery management and security support for the Corporate Services Modernisation Programme, encompassing People, Finance and Commercial solutions using HCM and ERP technology.

Your main responsibilities will be to:

• Produce and maintain the cyber security technical delivery plan, including dependencies, milestones, risks, issues and decisions.
• Lead end-to-end cyber security assurance across the CSM solution, ensuring that security controls, risks and assurance evidence are coherent across applications, integrations, data flows, infrastructure, suppliers, operational processes and service management arrangements.
• Lead Secure by Design, cyber security assurance, and risk management activities across projects, programmes, and services, ensuring security risks are identified, assessed, mitigated, and managed in accordance with MoD policy, standards, and risk appetite.
• Act as the senior cyber security advisor to business, programme, commercial and supplier stakeholders, influencing acquisition strategies, security requirements, governance decisions and the integration of security throughout the solution life cycle.
• Coordinate cross-supplier cyber security assurance, ensuring security requirements, remediation activities and assurance evidence are planned, monitored and delivered in line with programme milestones.
• Manage cyber security RAID material in JIRA, or the agreed programme tooling, ensuring risks, issues, actions and decisions are visible and actively managed.
• Align cyber security delivery activity with EATD, functional workstreams, business change, commercial activity and supplier delivery plans.
• Maintain visibility of security-critical dependencies across the CSM landscape, including applications, integrations, data flows, infrastructure, suppliers, operational processes and service management arrangements.
• Provide cyber security input to the CSM Portfolio implementation plan and release roadmap.
• Own supplier and third-party security assurance, including assessing supplier security posture, conducting security reviews, defining security requirements, managing information-sharing and release activities, and ensuring effective remediation of identified security vulnerabilities and compliance issues.
• Develop and maintain security governance frameworks, methodologies and artefacts, including security requirements, Security Aspects Letters, grading guides, risk assessments, assurance plans and approval documentation to support informed decision-making.
• Drive continuous improvement in cyber security and supply chain resilience, identifying security gaps, monitoring supplier performance, strengthening assurance processes, and ensuring compliance with the MOD Security Risk Management Framework, Secure by Design principles, and relevant legal and regulatory obligations.

Essential:

• An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks.
• Experience delivering or coordinating cyber security assurance activities within complex cloud-hosted environments, including SaaS, PaaS and IaaS services.
• Experience of working within a large-scale complex digital modernisation programme.
• Experience of using industry-recognised security frameworks within secure solutions, including ISO/IEC 27001, NIST CSF and NCSC CAF.
• Oracle experience.
• Experience managing delivery plans, dependencies, RAID material and assurance evidence using programme delivery tooling.
• Experience working across multi-supplier delivery environments.
• Experience aligning cyber security activity with architecture, technical delivery, functional workstreams, business change and service transition.
• Good planning, problem-solving and organisational skills.
• Excellent verbal and written communication skills.
• Excellent interpersonal skills.
• Good digital skills, including proficiency in office applications, information collaboration software and industry-recognised technical project tooling.

Desirable:

• Knowledge of MOD Security Policies, processes, structures and tooling.
• Experience of MOD or Government Digital Service ways of working.
• Knowledge of MOD corporate services, shared services, HR, finance or commercial systems.
• Experience of identity and access management, privileged access management, data protection and cloud service assurance.
• Experience supporting cyber security assurance activities across enterprise business systems and supplier-hosted service environments.
• Experience assessing cloud service providers, shared responsibility models, integration security and supplier security controls.
• Experience of supplier security management in complex public sector environments.
• Managing Successful Programmes, Agile, PRINCE2 or equivalent delivery qualification.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident: As a member of the Disability Confident Scheme, the MOD guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy.

Armed Forces Covenant: The MOD guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy.

In applying for this role, you acknowledge the following: this role falls in scope of the Off Payroll Working in the Public Sector legislation.