At a Glance
- Tasks: Drive Security Assurance for digital products in a dynamic MOD transformation programme.
- Company: Capgemini, a leading digital delivery partner for the MOD.
- Benefits: Competitive salary, hybrid work model, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on innovation and career advancement.
- Why this job: Make a real impact on military digital services while ensuring security compliance.
- Qualifications: Experience in security assurance and client-facing roles, especially within MOD.
Location: Bristol or London | Hybrid - 1-2 days per week on client site in Bristol, Bath or London
Duration: 31/03/2027
Total cost to Capgemini: £595 - £615 (Inside IR35)
Role Description: We are seeking an MOD experienced, senior Client facing Security Consultant to drive the Security Assurance activities for a number of digital products/platforms, being developed as part of a broader MOD business and digital transformation programme for which Capgemini is the Client's prime Digital Delivery Partner. The products/platforms are being deployed on to the MOD's Digital estate (MODCloud) for use by military end users.
You’ll be operating in a cross-Programme role, working collaboratively with the Delivery Managers and Technical Leads/Solution Architects for each of the digital products/platforms being developed, and the key MOD Client stakeholders for them (Project Managers, Service Owners, Senior Responsible Owners (SRO), Information Asset Owners (IAO), JSP453 Case Officers/Service Transition Officers, Technical Assurance/Technical Design Authority).
You’ll be responsible for ensuring that each of the digital products/platforms being developed are appropriately Secure by Design (SbD), compliant with relevant MOD and industry standards, and are adhering to the MOD security assurance requirements at each stage of their product lifecycle, from Design through to Live service/Through Life Support.
Key Responsibilities:
- Security Assurance
- Support Secure by Design (SbD) compliance, including threat and risk assessments, architecture and security control reviews, CAAT, DPIAs, ToA, Data Through Life Management, and assurance status tracking.
- Develop and review SMPs, SyOPs, vulnerability and patch management plans, privacy notices, and terms of use.
- Support DAR entries, IT health checks (ITHC) or SAST/DAST testing where applicable, remediation action plans, and MODCERT reporting using Vigilant.
- Wider MOD Assurance
- Support JSP 453 compliance, including PEF and TRRA responses.
- Engage with JSP453 rule owners and Security Transition Officers/Case Officers to secure approvals and sign-off.
- Security Planning and Risk Management
- Ensure Security Assurance activities are appropriately documented in Delivery Plans (working with Delivery Managers).
- Maintain RAID inputs and tracking and assist with identification and escalation of security risks.
- Cyber Security Governance
- Support internal and external cyber security audits.
- Design & Delivery Support
- Contribute to security requirements definition (principles, functional and non-functional requirements) within an Agile SDLC.
- Support access control design, configuration, and security test script development.
- Specialist Assurance
- Support NCSC Bulk Data Assessments where bulk data is in scope.
- Support Secure Software Development Lifecycle (SSDLC) management when required.
- Education & Awareness
- Promote Secure by Design through cyber security education and awareness across delivery teams.
Key Skills and Experience:
Essential:
- Proven experience as a Client facing Security Assurance Consultant/Coordinator/Security Manager, or similar role.
- UK MOD Delivery experience, including experience of delivering across the Government Digital Services (GDS) lifecycle, and managing assurance activities to MOD’s Secure by Design (SbD), JSP 453 (or earlier JSP 604), and JSP 440 standards.
- Experience working with distributed or hybrid teams.
- Demonstrated ability to work across cross-functional teams.
- Excellent facilitation, communication, and stakeholder management skills.
- Experience managing security risks, issues, and dependencies.
- Familiarity with Agile delivery tools Jira, Confluence.
Highly Desirable:
- Experience managing the Security Assurance aspects of digital products deployed onto the MOD Digital estate (MODCloud).
- Background in secure digital product design and development, software engineering, data, or transformation projects.
- Security Certifications.
Security Assurance Coordinator - SC Cleared in City of London employer: Boss Consulting
Capgemini is an exceptional employer, offering a dynamic work environment that fosters collaboration and innovation in the heart of Bristol or London. With a strong commitment to employee growth, we provide extensive training opportunities and support for professional development, ensuring our team members thrive in their careers. Our hybrid work model promotes a healthy work-life balance, while our focus on security assurance within the MOD sector allows employees to engage in meaningful projects that contribute to national security.
StudySmarter Expert Advice🤫
We think this is how you could land Security Assurance Coordinator - SC Cleared in City of London
✨Tip Number 1
Network like a pro! Get out there and connect with people in the industry. Attend events, join online forums, or even hit up LinkedIn. The more people you know, the better your chances of landing that Security Assurance Coordinator role.
✨Tip Number 2
Prepare for those interviews! Research the company and the MOD standards they work with. Be ready to discuss how your experience aligns with their needs, especially around Secure by Design and JSP 453 compliance. Show them you’re the perfect fit!
✨Tip Number 3
Don’t just apply anywhere; focus on roles that excite you! Use our website to find positions that match your skills and interests. Tailor your approach to each application, highlighting your relevant experience in security assurance and client-facing roles.
✨Tip Number 4
Follow up after interviews! A quick thank-you email can go a long way. It shows your enthusiasm for the role and keeps you fresh in their minds. Plus, it’s a great chance to reiterate why you’re the best candidate for the job.
We think you need these skills to ace Security Assurance Coordinator - SC Cleared in City of London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Security Assurance Coordinator role. Highlight your experience with MOD standards and any relevant security certifications. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're the perfect fit for this role. Mention specific experiences that relate to the key responsibilities outlined in the job description. Let us know why you’re excited about working with us!
Showcase Your Communication Skills:Since this role involves a lot of stakeholder management, make sure to demonstrate your excellent communication skills in your application. Whether it's through your CV or cover letter, we want to see how you can effectively engage with clients and teams.
Apply Through Our Website:Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it makes the process smoother for everyone involved!
How to prepare for a job interview at Boss Consulting
✨Know Your Security Standards
Make sure you brush up on the MOD's Secure by Design (SbD) principles and JSP 453 standards. Being able to discuss these in detail will show that you understand the requirements and can apply them effectively in your role.
✨Showcase Your Client-Facing Skills
Prepare examples of how you've successfully managed client relationships in previous roles. Highlight your communication and stakeholder management skills, as these are crucial for a Security Assurance Coordinator working with MOD clients.
✨Familiarise Yourself with Agile Tools
Since experience with Agile delivery tools like Jira and Confluence is essential, make sure you can talk about how you've used these tools in past projects. Be ready to explain how they helped you manage security risks and documentation.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving abilities in real-world scenarios. Think of specific situations where you had to conduct threat assessments or manage security risks, and be prepared to walk the interviewer through your thought process.
