53 jobs found

About the Role Salary for UKTL specialist roles are benchmarked against the external market and may include additional compensation to recognise in-demand technical expertise. Build your voice. Shape the future of telecoms security. You're someone who understands telecoms-not just how networks work, but why they matter. You enjoy getting into the detail, but you also want your work to have a bigger impact. In this role, you'll help shape the Standards that underpin Security and Resilience in Telecoms networks. You'll be part of the conversations that define how future telecom networks are built, secured, and trusted. If you're ready to step into a role where your technical expertise influences real world outcomes, this is your next move. What you'll be doing You'll play an active role in shaping telecom security standards while bringing valuable insights back into UKTL. You'll work closely with senior colleagues, contributing your expertise and growing your influence over time. Day to day, you will: Represent UKTL internationally - You'll participate in global telecoms standards forums, helping to ensure UKTL's voice on security and resilience is heard. Turn technical insight into real impact - You'll produce reports, presentations, and briefings that help stakeholders understand architecture, risk, and emerging trends. Support future telecom architecture - You'll contribute to the evolution of secure, forward looking telecom systems aligned with industry change. Collaborate and build relationships - You'll work closely with standards bodies, industry peers, suppliers, and internal teams to drive shared goals forward. Promote best practice - You'll help position UKTL as a trusted voice in telecom security by championing resilient, secure by design approaches. Translate complexity into clarity - You'll break down technical standards into practical, actionable insights for a wide range of audiences. Stay ahead of the curve - You'll monitor global telecom trends-AI, IoT, satellite networks-and assess what they mean for security and resilience. Support and mentor others - You'll share your knowledge, contributing to the growth of capability across the team. Get hands on with real world impact - You'll support testing, research, and continuous improvement activity, ensuring new technologies can be securely deployed. The impact you'll have Shape how telecom standards evolve globally Strengthen the security and resilience of UK telecom networks Inform decision making across operators, vendors, and government Build UKTL's reputation as a trusted technical authority Your work will help you see your work influence real change-not just theory. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week - put part of this role you will be traveling up 9 weeks of the year We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. About You What you bring You're technically strong, collaborative, and curious. You're comfortable working with experts, learning from others, and gradually building your own voice. You'll likely have: An understanding of global telecom ecosystems and standards environments, particularly 3GPP and GSMA. Expertise in areas including: Mobile or fixed core networks AI in telecoms Security principles and their translation in Standards Mobile authentication Non terrestrial (satellite) networks A good grasp of global telecom landscapes and trends Awareness of emerging technologies like IoT, AI, and satellite communications Confidence engaging with stakeholders across industry and government The ability to explain complex technical ideas clearly Strong analytical, documentation, and communication skills A collaborative mindset and willingness to learn We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. About Us UKTL is building leading edge Telecoms testing facilities to keep our telecommunications networks safe, accelerate the roll out of new technologies, and grow our world leading telecoms sector to maintain resiliency and security. Successful candidates will join a state of the art facility and be supporting the team conducting testing and research on the latest technologies and innovations in the industry. You will work alongside our infrastructure and Cybersecurity professionals to ensure that the UK's world class Telecoms infrastructure grows in a resilient and secure manner underpinning growth in other industry sectors. As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors. The National Physical Laboratory (NPL) is a world leading centre of excellence that provides cutting edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here. NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme. At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we're creating an environment where all our colleagues feel supported and welcome. We offer a wealth of above industry standard benefits, such as enhanced pension scheme, flexible working, and more. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we're always willing to make reasonable adjustments to the recruitment process.

Salary up to 75,537, 37 annual leave days plus 11 bank holidays and discretionary days, hybrid working policy, competitive pension scheme and other employee benefits Hays Technology are working in partnership with a Higher Education establishment in Stoke-on-Trent to recruit a Cyber Security Manager on a permanent basis. The successful candidate will lead and manage the overall approach to cyber security and governance of all environments. Key Responsibilities: Develop, implement, and continuously update the cyber security strategy, aligning it with business objectives and regulatory requirements, establishing and enforcing cyber security policies, standards, and guidelines to protect assets and data. Conduct regular risk assessments and vulnerability analyses to identify potential threats and weaknesses in the organisation's infrastructure, implementing and overseeing risk management processes, ensuring that appropriate controls and countermeasures are in place to mitigate all identified risks. Lead the incident response efforts, including preparing for, detecting, and responding to cyber security incidents, ensure that an effective incident response plan is in place and regularly tested and managing post incident analysis and reporting to prevent future occurrences. Manage and mentor the cyber security team, fostering a culture of continuous learning and development, ensuring that the team has the necessary skills and tools to protect the organisation effectively, and oversee recruitment, training, and performance management. Ensure that the organisation complies with all relevant cyber security laws, regulations, and industry standards, with responsibility for internal and external cyber security audits, ensuring that any identified gaps are addressed promptly and certifications are maintained. Primary point of contact for cyber security matters, collaborating with other departments, stakeholders, and external partners to ensure a coordinated approach to cyber security, communicating cyber security risks, incidents, and strategies to senior management and other stakeholders, providing insights and recommendations to support informed decision-making. In order to apply, you must have the following skills and experience: Educated to degree level in Cybersecurity or computing-based subjects, or in possession of an equivalent professional qualification or relevant experience. Certified Information Systems Security Professional (CISSP), Chartered IT Professional (CITP) (BCS) or equivalent qualification or experience. Extensive experience of leadership at an appropriately senior level within higher education or similarly complex organisation, including management of staff and resources. Experience of gathering operational evidence on the performance of cyber security using vulnerability assessment tools. An awareness and understanding of networking and communication related concepts and cloud virtualisation techniques. If you have the relevant experience and would like to apply, please submit your CV. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)

The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. You will need to operate with autonomy, technical credibility and the ability to provide clear decision support to senior leaders. Own and maintain the Product Security Management Plan, ensuring it defines the approach, governance, assurance expectations and lifecycle security activities required for the programme. Define and assure the OT and IT security architecture for shipboard and supporting systems. Act as a senior security authority within the Integrated Project Team, providing direction, challenge and assurance across engineering and delivery activity. Embed secure-by-design principles across platform design, system integration, IT/OT architecture, operational technology, networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure configuration baselines and identity and access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked and escalated where required. Provide cybersecurity input to accreditation, certification, assurance, and acceptance activities. Define supplier security requirements and ensure they are embedded in contracts, delivery expectations, security schedules, and technical acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing, and technical assurance activities across platform, IT, OT, and supporting environments. Define security requirements for factory acceptance testing, integration testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting environments. Provide security advice on operational resilience, cyber recovery, secure maintenance, patching, configuration control and through-life security management. Work collaboratively with naval architects, systems engineers, platform engineers, OT specialists, IT teams, suppliers, assurance teams and senior programme stakeholders. Produce clear technical assurance outputs, security design material, decision papers, risk statements, briefing notes and governance updates. Work independently as a senior subject matter expert, determining the day-to-day technical approach, stakeholder engagement and assurance rhythm required to achieve agreed outcomes. Relevant education or industry-recognised certifications in cybersecurity, information assurance, secure engineering, security architecture, risk management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture and delivery actions. Strong understanding of vulnerability assessment, penetration testing, technical assurance and security validation approaches. Ability to review security evidence, technical designs, SBOMs, assurance artefacts and supplier security claims. Strong stakeholder management skills, including the ability to influence senior technical and programme stakeholders. Ability to work across engineering, architecture, platform, IT, OT, assurance, supply chain and programme teams. Strong written and verbal communication skills, with the ability to produce concise technical assurance material, risk statements, executive briefings and decision papers. Ability to work independently and provide senior technical direction without day-to-day supervision. Proven experience in a senior cybersecurity, product security, information assurance, or secure engineering role. Experience supporting major defence, maritime, naval, shipbuilding, CNI or complex engineering programmes. Experience defining or maintaining a Product Security Management Plan, Security Management Plan, Security Case, accreditation pack or equivalent assurance artefact. Experience embedding cybersecurity across the full engineering lifecycle, from requirements and design through to build, integration, validation, and acceptance. Experience supporting secure architecture across IT and OT environments. Experience with shipboard systems, platform systems, industrial control systems, mission systems, navigation, propulsion, communications or similar complex operational environments would be highly beneficial. Experience leading security input into design reviews, technical governance forums and assurance gates. Experience developing and maintaining security risk registers, treatment plans, control evidence and assurance records. Experience supporting MOD, NCSC, defence or maritime compliance activity. Experience defining supplier security requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling high-classification or sensitive defence information in line with UK MOD, NCSC, client security and data protection requirements would be advantageous. Cybersecurity experience within defence, maritime, shipbuilding, critical national infrastructure, or operationally critical environments. Strong experience operating in a senior product security, cyber assurance, information assurance, secure engineering or security architecture role. Strong understanding of secure-by-design principles and their application across complex engineering lifecycles. Experience securing complex IT and OT systems, including platform systems, industrial control systems, operational technology, networks, communications and support environments. Practical experience applying MOD, NCSC, defence security, information assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from a cybersecurity perspective. TEMPEST awareness or experience, particularly as it relates to defence standards, secure design, and NCSC guidance. Experience with maritime cybersecurity, naval systems, shipboard integration, or platform security. Experience with MOD security policy, defence standards, JSPs, Secure by Design, NCSC guidance or equivalent assurance frameworks. Experience supporting accreditation, security case development, security assurance planning, or certification activities for defence- or safety-related systems. Experience with OT security architecture, industrial control systems, safety-related control environments and operational resilience. Experience defining cybersecurity requirements for harbour trials, sea trials, factory acceptance testing, or operational acceptance. Experience supporting supplier assurance across complex engineering supply chains. Experience contributing to executive-level security reporting, assurance dashboards, risk briefings or programme decision packs. Strong supplier and third-party oversight experience, including security requirements definition, deliverable review . click apply for full job details

The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. You will need to operate with autonomy, technical credibility and the ability to provide clear decision support to senior leaders. Own and maintain the Product Security Management Plan, ensuring it defines the approach, governance, assurance expectations and lifecycle security activities required for the programme. Define and assure the OT and IT security architecture for shipboard and supporting systems. Act as a senior security authority within the Integrated Project Team, providing direction, challenge and assurance across engineering and delivery activity. Embed secure-by-design principles across platform design, system integration, IT/OT architecture, operational technology, networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure configuration baselines and identity and access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked and escalated where required. Provide cybersecurity input to accreditation, certification, assurance, and acceptance activities. Define supplier security requirements and ensure they are embedded in contracts, delivery expectations, security schedules, and technical acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing, and technical assurance activities across platform, IT, OT, and supporting environments. Define security requirements for factory acceptance testing, integration testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting environments. Provide security advice on operational resilience, cyber recovery, secure maintenance, patching, configuration control and through-life security management. Work collaboratively with naval architects, systems engineers, platform engineers, OT specialists, IT teams, suppliers, assurance teams and senior programme stakeholders. Produce clear technical assurance outputs, security design material, decision papers, risk statements, briefing notes and governance updates. Work independently as a senior subject matter expert, determining the day-to-day technical approach, stakeholder engagement and assurance rhythm required to achieve agreed outcomes. Relevant education or industry-recognised certifications in cybersecurity, information assurance, secure engineering, security architecture, risk management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture and delivery actions. Strong understanding of vulnerability assessment, penetration testing, technical assurance and security validation approaches. Ability to review security evidence, technical designs, SBOMs, assurance artefacts and supplier security claims. Strong stakeholder management skills, including the ability to influence senior technical and programme stakeholders. Ability to work across engineering, architecture, platform, IT, OT, assurance, supply chain and programme teams. Strong written and verbal communication skills, with the ability to produce concise technical assurance material, risk statements, executive briefings and decision papers. Ability to work independently and provide senior technical direction without day-to-day supervision. Proven experience in a senior cybersecurity, product security, information assurance, or secure engineering role. Experience supporting major defence, maritime, naval, shipbuilding, CNI or complex engineering programmes. Experience defining or maintaining a Product Security Management Plan, Security Management Plan, Security Case, accreditation pack or equivalent assurance artefact. Experience embedding cybersecurity across the full engineering lifecycle, from requirements and design through to build, integration, validation, and acceptance. Experience supporting secure architecture across IT and OT environments. Experience with shipboard systems, platform systems, industrial control systems, mission systems, navigation, propulsion, communications or similar complex operational environments would be highly beneficial. Experience leading security input into design reviews, technical governance forums and assurance gates. Experience developing and maintaining security risk registers, treatment plans, control evidence and assurance records. Experience supporting MOD, NCSC, defence or maritime compliance activity. Experience defining supplier security requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling high-classification or sensitive defence information in line with UK MOD, NCSC, client security and data protection requirements would be advantageous. Cybersecurity experience within defence, maritime, shipbuilding, critical national infrastructure, or operationally critical environments. Strong experience operating in a senior product security, cyber assurance, information assurance, secure engineering or security architecture role. Strong understanding of secure-by-design principles and their application across complex engineering lifecycles. Experience securing complex IT and OT systems, including platform systems, industrial control systems, operational technology, networks, communications and support environments. Practical experience applying MOD, NCSC, defence security, information assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from a cybersecurity perspective. TEMPEST awareness or experience, particularly as it relates to defence standards, secure design, and NCSC guidance. Experience with maritime cybersecurity, naval systems, shipboard integration, or platform security. Experience with MOD security policy, defence standards, JSPs, Secure by Design, NCSC guidance or equivalent assurance frameworks. Experience supporting accreditation, security case development, security assurance planning, or certification activities for defence- or safety-related systems. Experience with OT security architecture, industrial control systems, safety-related control environments and operational resilience. Experience defining cybersecurity requirements for harbour trials, sea trials, factory acceptance testing, or operational acceptance. Experience supporting supplier assurance across complex engineering supply chains. Experience contributing to executive-level security reporting, assurance dashboards, risk briefings or programme decision packs. Strong supplier and third-party oversight experience, including security requirements definition, deliverable review . click apply for full job details

The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. You will need to operate with autonomy, technical credibility and the ability to provide clear decision support to senior leaders. Own and maintain the Product Security Management Plan, ensuring it defines the approach, governance, assurance expectations and lifecycle security activities required for the programme. Define and assure the OT and IT security architecture for shipboard and supporting systems. Act as a senior security authority within the Integrated Project Team, providing direction, challenge and assurance across engineering and delivery activity. Embed secure-by-design principles across platform design, system integration, IT/OT architecture, operational technology, networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure configuration baselines and identity and access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked and escalated where required. Provide cybersecurity input to accreditation, certification, assurance, and acceptance activities. Define supplier security requirements and ensure they are embedded in contracts, delivery expectations, security schedules, and technical acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing, and technical assurance activities across platform, IT, OT, and supporting environments. Define security requirements for factory acceptance testing, integration testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting environments. Provide security advice on operational resilience, cyber recovery, secure maintenance, patching, configuration control and through-life security management. Work collaboratively with naval architects, systems engineers, platform engineers, OT specialists, IT teams, suppliers, assurance teams and senior programme stakeholders. Produce clear technical assurance outputs, security design material, decision papers, risk statements, briefing notes and governance updates. Work independently as a senior subject matter expert, determining the day-to-day technical approach, stakeholder engagement and assurance rhythm required to achieve agreed outcomes. Relevant education or industry-recognised certifications in cybersecurity, information assurance, secure engineering, security architecture, risk management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture and delivery actions. Strong understanding of vulnerability assessment, penetration testing, technical assurance and security validation approaches. Ability to review security evidence, technical designs, SBOMs, assurance artefacts and supplier security claims. Strong stakeholder management skills, including the ability to influence senior technical and programme stakeholders. Ability to work across engineering, architecture, platform, IT, OT, assurance, supply chain and programme teams. Strong written and verbal communication skills, with the ability to produce concise technical assurance material, risk statements, executive briefings and decision papers. Ability to work independently and provide senior technical direction without day-to-day supervision. Proven experience in a senior cybersecurity, product security, information assurance, or secure engineering role. Experience supporting major defence, maritime, naval, shipbuilding, CNI or complex engineering programmes. Experience defining or maintaining a Product Security Management Plan, Security Management Plan, Security Case, accreditation pack or equivalent assurance artefact. Experience embedding cybersecurity across the full engineering lifecycle, from requirements and design through to build, integration, validation, and acceptance. Experience supporting secure architecture across IT and OT environments. Experience with shipboard systems, platform systems, industrial control systems, mission systems, navigation, propulsion, communications or similar complex operational environments would be highly beneficial. Experience leading security input into design reviews, technical governance forums and assurance gates. Experience developing and maintaining security risk registers, treatment plans, control evidence and assurance records. Experience supporting MOD, NCSC, defence or maritime compliance activity. Experience defining supplier security requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling high-classification or sensitive defence information in line with UK MOD, NCSC, client security and data protection requirements would be advantageous. Cybersecurity experience within defence, maritime, shipbuilding, critical national infrastructure, or operationally critical environments. Strong experience operating in a senior product security, cyber assurance, information assurance, secure engineering or security architecture role. Strong understanding of secure-by-design principles and their application across complex engineering lifecycles. Experience securing complex IT and OT systems, including platform systems, industrial control systems, operational technology, networks, communications and support environments. Practical experience applying MOD, NCSC, defence security, information assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from a cybersecurity perspective. TEMPEST awareness or experience, particularly as it relates to defence standards, secure design, and NCSC guidance. Experience with maritime cybersecurity, naval systems, shipboard integration, or platform security. Experience with MOD security policy, defence standards, JSPs, Secure by Design, NCSC guidance or equivalent assurance frameworks. Experience supporting accreditation, security case development, security assurance planning, or certification activities for defence- or safety-related systems. Experience with OT security architecture, industrial control systems, safety-related control environments and operational resilience. Experience defining cybersecurity requirements for harbour trials, sea trials, factory acceptance testing, or operational acceptance. Experience supporting supplier assurance across complex engineering supply chains. Experience contributing to executive-level security reporting, assurance dashboards, risk briefings or programme decision packs. Strong supplier and third-party oversight experience, including security requirements definition, deliverable review . click apply for full job details

Business Continuity Manager Permanent - 55k- 65k salary Portsmouth based - hybrid working - 1 day a week onsite Reporting to the Head of Assurance, the Business Continuity Manager (BCM) is responsible for designing, implementing, and maintaining the organisation's business continuity and resilience framework across internal operations and client-managed infrastructure. The role ensures that systems, services, and processes remain resilient against disruption, meet regulatory expectations, and align with evolving risks including cybersecurity and AI usage. RESPONSIBILITIES Business Continuity Strategy & Governance Develop, implement, and continuously improve the Business Continuity Management System (BCMS) aligned with ISO 22301 and industry best practices, ensuring it aligns with risk and resilience goals. Business Impact Analysis (BIA) & Risk Assessment Lead and maintain up-to-date Business Impact Analyses (BIA) for critical IT systems and business services System Audits & Assurance Conduct periodic system-level BC audits Continuity Exercises & Testing Establish a structured testing framework to conduct regular continuity tests and simulations. Ensure each test includes detailed documentation, tracking of progress, and evaluation against set acceptance criteria to assess effectiveness and readiness. Client Infrastructure Resilience Oversee business continuity and disaster recovery readiness for client-managed environments Monitoring, Reporting & Executive Communication Provide monthly BC preparedness reports to executive leadership Regulatory & Compliance Alignment Ensure compliance with relevant standards and regulations (e.g., ISO 22301, ISO 27001, GDPR) Continuous Improvement & Awareness Promote awareness and training on business continuity across the organisation Stakeholder Engagement and Training: Collaborate with external suppliers to ensure their service continuity plans align with continuity requirements, particularly for critical services, fostering resilience across the supply chain. EXPERIENCE Extensive experience in continuity management within a service delivery or operations capacity, with a focus on continuity testing and governance ideally in a professional services or regulated environment. Expertise in ISO 22301 standards Background in conducting business impact analyses and maturity assessments. Proficiency with continuity planning tools and methodologies. Relevant qualification in business continuity management, risk management, or a related field. SKILLS Continuity and Crisis Management: Strong ability to plan, execute, and oversee business continuity measures and crisis response. Stakeholder Engagement: Proven skills in engaging and aligning stakeholders across departments. Analytical and Critical Thinking: Strong analytical skills for assessing risk impacts and developing mitigation strategies. Organisational and Project Management: Effective time management and organisational skills to balance multiple priorities. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.

Business Continuity Manager Permanent - £55k-£65k salary Portsmouth based - hybrid working - 1 day a week onsite Reporting to the Head of Assurance, the Business Continuity Manager (BCM) is responsible for designing, implementing, and maintaining the organisation's business continuity and resilience framework across internal operations and client-managed infrastructure. The role ensures that systems, services, and processes remain resilient against disruption, meet regulatory expectations, and align with evolving risks including cybersecurity and AI usage. RESPONSIBILITIES Business Continuity Strategy & Governance Develop, implement, and continuously improve the Business Continuity Management System (BCMS) aligned with ISO 22301 and industry best practices, ensuring it aligns with risk and resilience goals. Business Impact Analysis (BIA) & Risk Assessment Lead and maintain up-to-date Business Impact Analyses (BIA) for critical IT systems and business services System Audits & Assurance Conduct periodic system-level BC audits Continuity Exercises & Testing Establish a structured testing framework to conduct regular continuity tests and simulations. Ensure each test includes detailed documentation, tracking of progress, and evaluation against set acceptance criteria to assess effectiveness and readiness. Client Infrastructure Resilience Oversee business continuity and disaster recovery readiness for client-managed environments Monitoring, Reporting & Executive Communication Provide monthly BC preparedness reports to executive leadership Regulatory & Compliance Alignment Ensure compliance with relevant standards and regulations (eg, ISO 22301, ISO 27001, GDPR) Continuous Improvement & Awareness Promote awareness and training on business continuity across the organisation Stakeholder Engagement and Training: Collaborate with external suppliers to ensure their service continuity plans align with continuity requirements, particularly for critical services, fostering resilience across the supply chain. EXPERIENCE Extensive experience in continuity management within a service delivery or operations capacity, with a focus on continuity testing and governance ideally in a professional services or regulated environment. Expertise in ISO 22301 standards Background in conducting business impact analyses and maturity assessments. Proficiency with continuity planning tools and methodologies. Relevant qualification in business continuity management, risk management, or a related field. SKILLS Continuity and Crisis Management: Strong ability to plan, execute, and oversee business continuity measures and crisis response. Stakeholder Engagement: Proven skills in engaging and aligning stakeholders across departments. Analytical and Critical Thinking: Strong analytical skills for assessing risk impacts and developing mitigation strategies. Organisational and Project Management: Effective time management and organisational skills to balance multiple priorities. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.

Group Head of IT Salary: Competitive Benefits (Dependent on Experience) Location: Bristol Job Type: Permanent Full Time Lead Technology That Drives Business Success The Company: Build Recruitment provides specialist recruitment services, supplying quality candidates on a temporary or permanent basis to leading organisations throughout the built environment from executive to operative level. With offices in London, Manchester, and the Southwest, we specialise in Housing, Construction, Facilities Management, Property, Surveying, Health & Safety and Sales. We supply candidates from executive to operative level, and are currently working with a construciton and maintenance based company, who are looking for an Group head of IT based in Bristol. You'll be responsible for shaping the organisation's technology direction, leading a dedicated IT function and delivering reliable, secure and scalable systems that enable teams across the business to work effectively. Alongside overseeing day-to-day IT operations, you'll champion innovation, modernise technology where appropriate and ensure the business is equipped for the future. What You'll Be Doing Create and deliver a long-term technology strategy that supports business objectives. Provide strategic advice to senior leaders on technology investment and emerging solutions. Lead the ongoing development of IT infrastructure, business systems and cloud-based services. Manage technology projects from planning through to successful implementation, ensuring they are delivered on time and within budget. Develop strong partnerships with internal departments, external suppliers and technology providers. Manage departmental budgets and ensure technology spending delivers measurable value. Review service performance and identify opportunities to improve efficiency and user experience. Ensure compliance with relevant legislation, governance standards and data protection requirements. About You We're looking for an experienced IT professional who has successfully led technology functions within a complex business environment. You'll be equally comfortable discussing long-term strategy with senior stakeholders as you are supporting the delivery of operational improvements. You'll ideally have: Previous experience leading an IT department or technology function. A proven track record of delivering business-wide technology improvements. Strong knowledge of infrastructure, networking, cloud platforms and enterprise systems. Experience working with external technology partners and service providers. Strong commercial awareness, including budget ownership and supplier management. Excellent communication skills with the confidence to influence stakeholders at all levels. A collaborative leadership style focused on developing people and delivering excellent service. Technical Knowledge Experience in the following areas would be highly beneficial: Microsoft 365 and Azure Active Directory and Exchange Windows Server environments SQL Server Enterprise networking, VPNs and infrastructure management Cloud technologies and modern workplace solutions Cybersecurity principles and risk management IT service delivery and continuous improvement frameworks What's in It for You? Competitive salary based on experience. Comprehensive benefits package. Company pension. Generous annual leave. Ongoing investment in professional development. A genuine opportunity to influence technology strategy at senior level. A supportive working environment where innovation and new ideas are encouraged. Apply Today If you're a strategic IT leader looking for a role where you can make a lasting impact, we'd love to hear from you. For more information or to apply, contact Kirsty on (phone number removed) or submit your CV today.

The role requires a strong blend of cybersecurity leadership, secure engineering, technical assurance, stakeholder management, governance, supplier oversight and defence regulatory experience. You will need to operate with autonomy, technical credibility and the ability to provide clear decision support to senior leaders. Own and maintain the Product Security Management Plan, ensuring it defines the approach, governance, assurance expectations and lifecycle security activities required for the programme. Define and assure the OT and IT security architecture for shipboard and supporting systems. Act as a senior security authority within the Integrated Project Team, providing direction, challenge and assurance across engineering and delivery activity. Embed secure-by-design principles across platform design, system integration, IT/OT architecture, operational technology, networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network zoning, segregation, trust boundaries, secure configuration baselines and identity and access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked and escalated where required. Provide cybersecurity input to accreditation, certification, assurance, and acceptance activities. Define supplier security requirements and ensure they are embedded in contracts, delivery expectations, security schedules, and technical acceptance criteria. Review and assess supplier security deliverables, including security claims, compliance evidence, technical designs, assurance artefacts and software bills of materials. Support the assessment of third-party and supply chain security risks across products, systems, components and supporting services. Scope and support vulnerability assessment, penetration testing, and technical assurance activities across platform, IT, OT, and supporting environments. Define security requirements for factory acceptance testing, integration testing, harbour trials and sea trial cyber validation. Support test planning, test readiness, defect management and security acceptance activity. Design and support onboard cyber incident response capabilities, including monitoring, logging, forensic readiness, and evidence-capture requirements. Define and assure logging, monitoring and detection requirements across shipboard and supporting environments. Provide security advice on operational resilience, cyber recovery, secure maintenance, patching, configuration control and through-life security management. Work collaboratively with naval architects, systems engineers, platform engineers, OT specialists, IT teams, suppliers, assurance teams and senior programme stakeholders. Produce clear technical assurance outputs, security design material, decision papers, risk statements, briefing notes and governance updates. Work independently as a senior subject matter expert, determining the day-to-day technical approach, stakeholder engagement and assurance rhythm required to achieve agreed outcomes. Relevant education or industry-recognised certifications in cybersecurity, information assurance, secure engineering, security architecture, risk management or a related discipline. Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would be highly beneficial. Strong understanding of security architecture, including zoning, segregation, trust boundaries, secure configuration baselines, identity and access management and secure remote access. Ability to lead security input into formal engineering design reviews and technical governance forums. Ability to translate security risks and regulatory expectations into practical engineering, architecture and delivery actions. Strong understanding of vulnerability assessment, penetration testing, technical assurance and security validation approaches. Ability to review security evidence, technical designs, SBOMs, assurance artefacts and supplier security claims. Strong stakeholder management skills, including the ability to influence senior technical and programme stakeholders. Ability to work across engineering, architecture, platform, IT, OT, assurance, supply chain and programme teams. Strong written and verbal communication skills, with the ability to produce concise technical assurance material, risk statements, executive briefings and decision papers. Ability to work independently and provide senior technical direction without day-to-day supervision. Proven experience in a senior cybersecurity, product security, information assurance, or secure engineering role. Experience supporting major defence, maritime, naval, shipbuilding, CNI or complex engineering programmes. Experience defining or maintaining a Product Security Management Plan, Security Management Plan, Security Case, accreditation pack or equivalent assurance artefact. Experience embedding cybersecurity across the full engineering lifecycle, from requirements and design through to build, integration, validation, and acceptance. Experience supporting secure architecture across IT and OT environments. Experience with shipboard systems, platform systems, industrial control systems, mission systems, navigation, propulsion, communications or similar complex operational environments would be highly beneficial. Experience leading security input into design reviews, technical governance forums and assurance gates. Experience developing and maintaining security risk registers, treatment plans, control evidence and assurance records. Experience supporting MOD, NCSC, defence or maritime compliance activity. Experience defining supplier security requirements and assessing third-party security evidence. Experience with SBOM review, software assurance, secure configuration, vulnerability management and technical security testing. Experience supporting cyber incident response design, forensic readiness, logging, monitoring and detection requirements. Experience operating within Integrated Project Teams or multi-disciplinary engineering delivery environments. Experience handling high-classification or sensitive defence information in line with UK MOD, NCSC, client security and data protection requirements would be advantageous. Cybersecurity experience within defence, maritime, shipbuilding, critical national infrastructure, or operationally critical environments. Strong experience operating in a senior product security, cyber assurance, information assurance, secure engineering or security architecture role. Strong understanding of secure-by-design principles and their application across complex engineering lifecycles. Experience securing complex IT and OT systems, including platform systems, industrial control systems, operational technology, networks, communications and support environments. Practical experience applying MOD, NCSC, defence security, information assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from a cybersecurity perspective. TEMPEST awareness or experience, particularly as it relates to defence standards, secure design, and NCSC guidance. Experience with maritime cybersecurity, naval systems, shipboard integration, or platform security. Experience with MOD security policy, defence standards, JSPs, Secure by Design, NCSC guidance or equivalent assurance frameworks. Experience supporting accreditation, security case development, security assurance planning, or certification activities for defence- or safety-related systems. Experience with OT security architecture, industrial control systems, safety-related control environments and operational resilience. Experience defining cybersecurity requirements for harbour trials, sea trials, factory acceptance testing, or operational acceptance. Experience supporting supplier assurance across complex engineering supply chains. Experience contributing to executive-level security reporting, assurance dashboards, risk briefings or programme decision packs. Strong supplier and third-party oversight experience, including security requirements definition, deliverable review . click apply for full job details