Product Security Consultant

Salary: £41,500 - 71,000 per year

Requirements:

• Strong understanding of Information Assurance and Product Security within complex engineered systems
• Understanding of the Secure by Design concept versus the Security Accreditation process
• Experience within large-scale, highly regulated programmes such as defence, maritime, or aerospace
• Working knowledge of the systems engineering lifecycle and design assurance processes
• Proven experience delivering security cases and managing information risk
• Experience engaging with and assuring supplier deliverables
• Awareness of Whole Boat or platform-level security integration approaches is desirable
• Awareness and knowledge of the application of HM Government Information Security Standards IS 1 and 2 to complex products
• Awareness and knowledge of the application of the ISO 27000 series of standards to complex products
• Awareness and knowledge of the application of the IEC 62443 series of standards to complex products
• Familiarity with security technical testing scoping and test specification

Responsibilities:

• Define, agree, and deliver Product Security engineering activities in line with the programme Engineering Management Plan
• Ensure all security activities are performed in accordance with approved processes, templates, and guidance, with deviations appropriately controlled
• Act as the primary Product Security SME for PMS within programme working groups
• Lead the development of PMS Interim and Final Security Cases across defined programme phases
• Maintain alignment between system-level security artefacts and Whole Boat IA risk management approaches
• Maintain and manage PMS contributions to the Whole Boat IA Risk Register
• Identify, assess, and document IA requirement shortfalls and associated risks
• Manage and coordinate IA Technical Queries and formal communications in line with programme processes
• Ensure technical outputs consider security classification and handling constraints
• Operate within defined communication and data management processes
• Plan and manage Product Security activities to meet programme milestones and delivery schedules
• Provide regular reporting into project governance, including schedule and activity progress, risk and opportunity updates, and key milestone status
• Identify risks to delivery early and support mitigation and recovery planning
• Provide technical leadership and mentoring within the PMS Product Security team
• Support consistency, quality, and repeatability across Product Security outputs
• Contribute to continuous improvement of Product Security methods, tooling, and practices
• Deliver and support PMS Interim and Final Security Cases
• Develop and maintain the PMS IA and Security Risk Register
• Provide contributions to the Whole Boat IA Risk Register and associated artefacts
• Provide IA inputs to PMS test, set-to-work, and verification strategies
• Manage and resolve supplier IA Technical Queries
• Review supplier IA and cyber artefacts and provide assurance outputs
• Contribute to PMS Formal Design Reviews, FDP/FTP Groups, and lifecycle review gates
• Support PMS IA requirement capture, validation, and gap analysis outputs
• Contribute to PMS IA process development and continuous improvement activities
• Provide monthly project review inputs, including progress, risks, issues, and milestone tracking

Technologies:

• Support
• Security

More:

We are offering a 12-month contract based in Barrow, LA14, at £85.40 per hour inside IR35, with an expectation of 1 to 2 days per month. You will join a highly collaborative, multi-disciplinary engineering environment tackling complex challenges and helping to protect the people and places that depend on us. This is a delivery-focused, milestone-driven role within our Product Security team, where we are shaping the future of defence, security, and aerospace while giving you the opportunity to work on meaningful projects, collaborate with talented people, and develop your skills.

last updated 38 week of 2026