Information Security Risk Advisor

On behalf of the MOD we are looking for an Information Security Risk Advisor (Inside IR35) for a 5 month contract. Hybrid working with 1 day per week in London or Corsham.

The Ministry of Defence (MOD) is a central government department with a mission to protect our country and provide the ultimate guarantee of its security and independence, as well as helping to protect its values and interests abroad. The MOD is one of the biggest public procurement organisations in Europe and the single largest customer for UK industry. It currently manages approximately £20 billion of spend on capital investments in equipment and infrastructure every year. Over the next decade the MOD is committed to spending over £190 billion on equipment and support.

As an Information Security Risk Advisor you will identify, understand and mitigate cyber-related risks. You will provide risk or service owners with advice to help them make well informed risk based decisions. Your main responsibilities will be to:

• Work within established security and risk management governance structures, usually under supervision to support, review and undertake straightforward risk management activities.
• Help with the analysis and derivation of business-supporting security needs.
• Undertake Cyber Security related risk assessments, basic threat assessments and other risk management activities.
• Provide advice to address identified Cyber Security related risks by applying a variety of security capabilities, which may include using published guidance, standards, or experts as appropriate.
• Provide straightforward advice to validate the effectiveness of risk mitigation measures, including an understanding of how to use different assurance activities (such as a pen test) and make recommendations for improvement.
• Help risk or service owners to make decisions that are well informed by good and clear security advice, including contributing to reports or working within established reporting chains in a security team.

Essential:

• An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks.
• Experience within Information/Cyber Security, across Assurance, Governance and Risk.
• Ability to understand the organisation's business drivers and approach to managing risk to support delivery of balanced and cost-effective risk management decisions on situations with a relatively well-defined scope.
• Ability to relate risk to corporate governance, organisational strategic direction, and planning.
• Experience of delivering and reviewing risk assessments using appropriate risk assessment methods for common scenarios such as enterprise IT systems.
• Ability to elicit security requirements based on straightforward approaches such as threat/vulnerability/impact analysis.
• Experience of proactively identifying, interpreting, and leveraging a range of relevant sources of threat information, using a variety of techniques, to understand the threat environment (local and strategic), including its nature, capability, focus of interest and other factors associated with relevant threats.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, the MOD guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply.

Armed Forces Covenant

The MOD guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group.