System Security Officer

Overview

The Ministry of Defence is seeking a skilled cyber security professional to enhance the protection of critical military Information Systems and communications networks in London. This role focuses on supporting the secure deployment and operation of Communications and Information Systems (CIS) and IT solutions within MOD, adhering to MOD policy and Secure by Design principles. It involves engaging with diverse stakeholders to manage cyber security risks across various projects and capabilities in a dynamic setting.

Key Duties

• Assist in ensuring communications networks and IT projects comply with MOD security policies and secure design standards.
• Collaborate with system owners, security assessors, and delivery teams to evaluate and assure information systems’ security.
• Identify, assess, and document security risks, overseeing mitigation efforts and managing residual risks.
• Offer security guidance and support throughout system lifecycle to project teams and other stakeholders.
• Monitor adherence to security standards, policies, and assurance requirements.
• Lead investigations into security incidents and breaches, helping to implement improvements from lessons learned.
• Take charge in security governance meetings and working groups.
• Contribute to maintaining and enhancing security management processes, documentation, and assurance activities.
• Promote a culture of security awareness and encourage best practices among teams.

Candidate Profile

Ideal candidates should possess strong experience in cybersecurity or information risk management within ICT or CIS contexts, combined with excellent risk identification and communication skills. The role demands organizational ability and the talent to balance security needs with business and operational demands.

• Experience in cyber security, information assurance, or information risk management in ICT or CIS environments.
• Proficiency in identifying and managing security risks effectively.
• Familiarity with security assurance processes including Secure by Design or similar artefacts.
• Understanding of security policies, standards, and governance frameworks such as NIST CSF and ISO27001.
• Excellent communication and stakeholder engagement abilities.
• Capability to produce clear reports, risk assessments, and security documentation.
• Strong analytical skills supporting evidence-based recommendations.
• Experience collaborating across multi-disciplinary teams.

Desirable qualifications include experience within Defence, Government or regulated sectors, familiarity with security incident management, MOD security policies, and certifications like CISMP, CompTIA Security+, CCP, CISSP, or CISM.

Behaviours Required

• Effective decision making
• Adaptability and continuous improvement
• Communication and influencing skills
• Teamwork and collaboration

Additional Information

The role is advertised as 37 hours per week with flexibility for part-time or job-sharing arrangements where business needs permit. The Ministry offers a salary of £37,720 annually, with an additional £10,927 pension contribution, plus 25 days’ leave rising to 30 days after five years. Employees benefit from flexible working, personalized learning and development opportunities, inclusive culture, and a Civil Service pension with a 28.97% employer contribution.

Working arrangements include a non-contractual hybrid model where up to 40% remote work is possible but expect at least 60% onsite presence. The position requires DV clearance and is open only to UK nationals without sponsorship conditions. No relocation expenses or interview travel reimbursements are provided. New hires undergo a six-month probation.

The Ministry prohibits smoking in all Defence workplaces, reflecting its commitment to a healthy, safe working environment. Candidates will be assessed via Success Profiles focusing on behaviours and experience, including making effective decisions through CV, personal statement, and interview.

Applicants must ensure their submitted examples and statements are truthful and personally experienced, with strict anti-plagiarism rules including on AI-generated content.