At a Glance
- Tasks: Drive Security Assurance activities for MOD digital products and ensure compliance with security standards.
- Company: Capgemini, a leading digital transformation partner for the MOD.
- Benefits: Competitive pay, hybrid work model, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on innovation and security education.
- Why this job: Make a real impact on military digital products while enhancing your security expertise.
- Qualifications: Experience in security assurance and client-facing roles, especially within MOD.
The predicted salary is between 60000 - 70000 € per year.
Location: Bristol or London | Hybrid - 1-2 days per week on client site in Bristol, Bath or London
Duration: 31/03/2027
Total cost to Capgemini: £595 - £615 (Inside IR35)
We are seeking an MOD experienced, senior Client facing Security Consultant to drive the Security Assurance activities for a number of digital products/platforms, being developed as part of a broader MOD business and digital transformation programme for which Capgemini is the Client's prime Digital Delivery Partner. The products/platforms are being deployed on to the MOD's Digital estate (MODCloud) for use by military end users.
You’ll be operating in a cross-Programme role, working collaboratively with the Delivery Managers and Technical Leads/Solution Architects for each of the digital products/platforms being developed, and the key MOD Client stakeholders for them (Project Managers, Service Owners, Senior Responsible Owners (SRO), Information Asset Owners (IAO), JSP453 Case Officers/Service Transition Officers, Technical Assurance/Technical Design Authority).
You’ll be responsible for ensuring that each of the digital products/platforms being developed are appropriately Secure by Design (SbD), compliant with relevant MOD and industry standards, and are adhering to the MOD security assurance requirements at each stage of their product lifecycle, from Design through to Live service/Through Life Support.
Key Responsibilities:
- Security Assurance
- Support Secure by Design (SbD) compliance, including threat and risk assessments, architecture and security control reviews, CAAT, DPIAs, ToA, Data Through Life Management, and assurance status tracking.
- Develop and review SMPs, SyOPs, vulnerability and patch management plans, privacy notices, and terms of use.
- Support DAR entries, IT health checks (ITHC) or SAST/DAST testing where applicable, remediation action plans, and MODCERT reporting using Vigilant.
- Wider MOD Assurance
- Support JSP 453 compliance, including PEF and TRRA responses.
- Engage with JSP453 rule owners and Security Transition Officers/Case Officers to secure approvals and sign-off.
- Security Planning and Risk Management
- Ensure Security Assurance activities are appropriately documented in Delivery Plans (working with Delivery Managers).
- Maintain RAID inputs and tracking and assist with identification and escalation of security risks.
- Cyber Security Governance
- Support internal and external cyber security audits.
- Design & Delivery Support
- Contribute to security requirements definition (principles, functional and non-functional requirements) within an Agile SDLC.
- Support access control design, configuration, and security test script development.
- Specialist Assurance
- Support NCSC Bulk Data Assessments where bulk data is in scope.
- Support Secure Software Development Lifecycle (SSDLC) management when required.
- Education & Awareness
- Promote Secure by Design through cyber security education and awareness across delivery teams.
Key Skills and Experience:
Essential:
- Proven experience as a Client facing Security Assurance Consultant/Coordinator/Security Manager, or similar role.
- UK MOD Delivery experience, including experience of delivering across the Government Digital Services (GDS) lifecycle, and managing assurance activities to MOD’s Secure by Design (SbD), JSP 453 (or earlier JSP 604), and JSP 440 standards.
- Experience working with distributed or hybrid teams.
- Demonstrated ability to work across cross-functional teams.
- Excellent facilitation, communication, and stakeholder management skills.
- Experience managing security risks, issues, and dependencies.
- Familiarity with Agile delivery tools Jira, Confluence.
Highly Desirable:
- Experience managing the Security Assurance aspects of digital products deployed onto the MOD Digital estate (MODCloud).
- Background in secure digital product design and development, software engineering, data, or transformation projects.
- Security Certifications.
Security Network Consultant in London employer: Boss Consulting
Capgemini is an exceptional employer, offering a dynamic work environment in Bristol or London where innovation meets security. With a strong focus on employee growth and development, we provide opportunities for our team members to engage in meaningful projects that contribute to the MOD's digital transformation. Our hybrid work model promotes a healthy work-life balance, while our commitment to Secure by Design principles ensures that you will be at the forefront of cutting-edge security practices.
StudySmarter Expert Advice🤫
We think this is how you could land Security Network Consultant in London
✨Tip Number 1
Network, network, network! Get out there and connect with people in the industry. Attend events, join online forums, and don’t be shy about reaching out to professionals on LinkedIn. We all know that sometimes it’s not just what you know, but who you know!
✨Tip Number 2
Prepare for interviews like a pro! Research the company and its projects, especially those related to MOD and security assurance. We want you to show them you’re not just another candidate, but someone who understands their mission and can contribute to their goals.
✨Tip Number 3
Practice your pitch! You need to be able to clearly articulate your experience and how it aligns with the role of a Security Assurance Coordinator. We suggest rehearsing with a friend or in front of a mirror until you feel confident and natural.
✨Tip Number 4
Don’t forget to follow up after interviews! A quick thank-you email can go a long way in keeping you top of mind. We recommend mentioning something specific from your conversation to show you were engaged and interested.
We think you need these skills to ace Security Network Consultant in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Security Network Consultant role. Highlight your experience with MOD delivery and security assurance, and don’t forget to mention any relevant certifications. We want to see how your skills match what we’re looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re the perfect fit for this role. Share specific examples of your past experiences that align with the responsibilities listed in the job description. We love a good story!
Showcase Your Communication Skills:Since this role involves working with various stakeholders, it’s crucial to demonstrate your communication skills. In your application, highlight instances where you’ve successfully collaborated with cross-functional teams or managed client relationships. We value clear communicators!
Apply Through Our Website:Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it gives you a chance to explore more about us and what we do at StudySmarter.
How to prepare for a job interview at Boss Consulting
✨Know Your Security Standards
Make sure you brush up on the MOD's Secure by Design (SbD) principles and JSP 453 standards. Being able to discuss these in detail will show that you're not just familiar with them, but that you can apply them in real-world scenarios.
✨Showcase Your Client-Facing Skills
Since this role involves a lot of interaction with clients and stakeholders, prepare examples of how you've successfully managed client relationships in the past. Highlight your communication skills and how you've facilitated discussions to drive security assurance activities.
✨Demonstrate Cross-Functional Collaboration
Be ready to talk about your experience working with cross-functional teams. Share specific instances where you collaborated with Delivery Managers or Technical Leads to ensure security compliance throughout the product lifecycle.
✨Prepare for Scenario-Based Questions
Expect questions that put you in hypothetical situations related to security risks or compliance challenges. Think through your approach to risk management and how you would document and escalate issues, as this will be crucial in the role.
