Job Description:

Location: Reading - Hybrid Working
Contract: 12 Months
IR35: Inside IR35
Clearance: Active SC Clearance Required
Rate: £650 to £750 per day - DOE

We are seeking an experienced Risk Integration Specialist, working closely with the Product Security Integration Manager to align security risk management across engineering and security functions.

This role will focus on embedding risk management frameworks into engineering workflows, developing formal procedures and ensuring consistent risk assessment, mitigation and reporting throughout the product lifecycle.

You will operate with a high degree of autonomy, chairing multidisciplinary working groups and engaging with engineering teams, Product Security (PSec), Security stakeholders and senior management.

• Analyse the Engineering Security Authorisation to Operate Management Plan and identify opportunities to integrate risk management across engineering and security.

• Develop formal procedures and management plans for transferring and managing security risks between System 1 (products) and System 2 (enabling systems).

• Apply NIST risk management frameworks and standards, including NIST SP 800-30, 800-37, 800-53 and the NIST Cybersecurity Framework.

• Facilitate alignment between engineering and security teams on risk tolerance, assessment, mitigation and acceptance.

• Integrate security risk assessment processes across System 1 and System 2.

• Support the selection of security controls and development of Control Baseline Sets (CBS).

• Assess risk likelihood based on threat levels, vulnerabilities and the effectiveness of security controls.

• Support risk assessments relating to the international transportation of major units and suppliers' manufacturing and test facilities.

• Help define requirements and scope for common security risk management tools.

• Chair cross-functional working groups, translating engineering requirements into security risk metrics and driving agreed integration activities forward.

• Proven experience in security risk management, product security or security risk integration.

• Strong knowledge of NIST frameworks, particularly NIST SP 800-37 and NIST SP 800-53.

• Understanding of security risk assessment, threat analysis, vulnerability assessment and mitigation controls.

• Experience developing security management plans, policies and formal procedures.

• Ability to integrate risk management processes across engineering and security functions.

• Strong stakeholder management skills, including facilitating multidisciplinary working groups and engaging senior stakeholders.

• Relevant security qualification, such as CISM or CISSP, or equivalent.

• Good written and verbal English skills.

• Active SC Security Clearance.

• Degree or equivalent relevant security experience.

• Knowledge of the NIST Cybersecurity Framework (NIST CSF).

• CRISC certification.

• Knowledge of CNSSI 1253.

• Duration: 12 months

• Location: Reading - hybrid working

• IR35: Inside IR35

• Clearance: Active SC required

This is an excellent opportunity for an SC-cleared security risk professional to play a key role in integrating risk management across engineering and product security within a major programme.