Head of Product Security

The Company -

We are proud to be partnered with one of the world's leading organisations within Electronic Warfare, with over 100-years history providing the latest technological advances to military customers in the UK and further afield.

This is a great opportunity to work on critical programmes in EW and Future Combat Air Systems, where you will take the lead on safety-critical Product Security.

Key Skills:

• Experience being authorised signatory for product security sign-off
• Technical leadership experience, including mentoring and development skills
• Experience of Product Security
• Working in a complex safety-critical engineering environment
• Familiarity with Legislation - eg IPA, DPA, Official Secrets Act;
• Ideally Electronics experience but can consider other complex product development backgrounds
• Understanding of cyber security and cyber resilience

Company Benefits:

• Flexible salary depending on level to be discussed on application
• Annual bonus scheme
• Industry leading pension scheme - up to 15% employer contribution (based on 8% employee contribution). Please see table below.
• Life assurance - 4x annual salary if you have opted into the pension scheme
• Flexi leave - 12 flexi days a year for additional hours worked
• Annual leave - 25 days plus public holidays
• Hybrid working schedule with 1-day a week on-site with occasional UK travel
• Flexible benefits - 500 per year for employees to select their own benefits (ie. private medical insurance, dental insurance etc)

Key Experience:

• Has hands-on experience of developing robust security risk management system for complex high integrity electronics systems in accordance with customer, regulatory and legislative expectations.
• Familiarity with Legislation - eg IPA, DPA, Official Secrets Act;
• Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification.
• Knowledge of UK/NATO Information Assurance standards, procedures & systems, including HMG Security Policy Framework, ISO security standards, DO326A.
• Familiarity with the principles of incident investigation and knows how to implement an investigation process;
• Practical experience of NCSC and Common Criteria security evaluation techniques and requirements up to High Grade.
• Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations.
• Regularly delivered training courses within a Company and delivered awareess presentations to other groups. Has worked with others to identify the future Product Security needs of the Company;
• Awareness of product security implications relating to safety;
• Excellent communication and interpersonal skills, ability to interact with subject matter experts regarding a wide range of technical and operational topics.

Desirable experience:

• A strong background in design implementation of high integrity complex electronics, such as Software design to DO178C level C, Complex Electronics hardware upto DO254 Level
• Good understanding and experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754
• Understanding of the concept of operations for products, in order to understand the functional security risks and define/agree the appropriate mitigations;
• Ability to identify and deliver alternate/innovative ways to manage security, including ensuring buy-in from key regulatory bodies;
• Understanding of the role of advisory boards within the UK Government or NATO for security.
• Active membership of an external security specialist group or forum