This vacancy is open to permanent and fixed-term BAE Systems employees only. While agency workers have access to relevant permanent opportunities, this role has been designated as an internal opportunity and therefore only permanent and fixed-term employees of BAE Systems are eligible to apply.
You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.
We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.
If you don’t feel you can talk to your Line Manager, you can contact your HRBP.
PLEASE NOTE: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.
*Please note that this role is only available to sole UK national/UK eyes only due to Submarines data classification controls.
The Digital, Data & Cyber Function within Shared Services are pleased to share this internal progression opportunity to Exec GG11 for an established Audit/Cyber Defence specialist.
You role will be to develop & deliver Operational Assurance Compliance reporting to ensure DefStan requirements are embedded into Group IM&T Cyber Security Assurance Framework with the review and evaluation of applicable security controls to ensure contractual requirements are maintained. Ultimately, you will play a key part in aligning Operational Assurance with the Group IM&T Cyber Security Assurance Framework.
The role will require you to manage and report the applicable security controls to assure compliance and effectiveness aligned with DefStan requirements utilising appropriate tooling Provides guidance through reporting and re assurance activities, and undertake cyber–Security Assurance audits under DefStan requirements.
This role will provide you with the opportunity to develop your career within BAE Systems due to exposure gained across multiple business areas.
Your main responsibilities as Senior Cyber Certification Specialist will involve:
·Support the achievement and maintenance of Cyber Essentials and Cyber Essentials Plus certifications across applicable EIT-managed enterprise networks, working closely with external service providers and EIT operational teams.
·Support internal, external, and customer-led audits, including Cyber Essentials, Cyber Essentials Plus, and DEF STAN 05-138 assessments.
·Ensure all assurance activities are aligned with the Group IM&T Cyber Security Assurance Framework and Group Cyber Security Standards.
·Support Internal Audit and Group IM&T in delivering IT security assurance activities across relevant assurance domains.
·Assist in the identification, investigation, and resolution of cyber security compliance issues, control deficiencies, and audit findings.
·Build and maintain effective working relationships with key stakeholders, providing guidance and advice on cyber security compliance, assurance, and certification requirements.
·Maintain and develop the knowledge, skills, and professional awareness required to effectively fulfil the responsibilities of the role and support evolving cyber security requirements.
Your skills and qualifications
- ·A good understanding of DefStan to understand the processes to assessing and categorise critical services, work independently in highlighting issues and report on noncompliance with suitable mitigation recommendations
- ·Awareness of Cyber Essentials, ISO27001, ISO22301, ITIL.
- ·Capable of a very high standard of written communication including experience of writing complex Excel lookup functions to provide efficient mapping.
- ·Educated to degree level (or equivalent) preferably in a related technical discipline
- ·Has a good working experience of MOD Defence Cyber requirements, additionally Cyber Essentials knowledge
- ·Strong analytical background with the ability to analyse and interpret large and complex data sets and articulate observations, conclusions and recommendations in line with Defence Cyber Certification requirements
- Location: Preston (Hybrid - once per week on site) + Occasional UK travel
- Grade: GG11
Job description provided by BAE Systems.
View the original posting