A multinational defence organisation accredits every system it puts into service, and this role carries that work: assessing the risk, assembling the evidence, witnessing the testing and dealing with the security accreditation authorities until a system is cleared to operate.

What you would be doing

• Providing accreditation input into project proposals, statements of work and the wider project documentation, early enough to matter.
• Conducting security risk assessments for communication and information systems.
• Identifying, planning and managing the documents accreditation needs — system descriptions and security architecture, accreditation plans, risk assessment reports, security requirement statements, operating procedures and the test and verification plan.
• Witnessing security testing against that plan, and coordinating the remediation that follows with the people who have to do it.
• Building working relationships with accreditation authorities and with the internal units involved, so approval is a process rather than a negotiation.
• Feeding accreditation status into project and portfolio reporting, including highlight and exception reports.
• Briefing and presenting on the subject to people who are not specialists in it.

What you would bring

• Several years in cyber security — security architecture, delivery of security capabilities and services, or security risk management in demanding technical environments.
• Direct experience of accrediting major system acquisition or development projects in a large organisation.
• Security risk assessment methodologies and the tools that support them.
• Network knowledge with real deployment experience, including modern addressing.
• The independence to run your own work and the judgement to coordinate industry teams.
• A record of delivering systems and capabilities for government, military or industry customers.
• Fluent professional English.