Technical Security Manager - Secure by Design - SC Cleared (short term)

We are seeking an experienced Technical Security Manager to support the rapid stand-up of a Security Pillar within a defence programme delivering hardware/software prototyping at pace.
This engagement sits within a secure-by-design environment, with the focus shifting from pure architecture to a GRC-led security delivery role, embedding the MOD secure-by-design methodology and aligning activity with recognised defence security frameworks, with JSP 440 as the critical standard.
This is a 35-day initial contract and will suit someone open to a short-term engagement.

Key Responsibilities

• Support the stand-up and operation of the programme's Security Pillar, embedding Secure by Design principles throughout delivery.
• Apply JSP 440 (and related defence frameworks) to inform security planning, governance and control implementation.
• Own and maintain the programme risk register, ensuring risks are clearly defined, scored, tracked, and linked to actionable mitigation plans.
• Conduct control gap analysis against secure-by-design expectations and recommend pragmatic remediation actions.
• Define and evolve control frameworks for low TRL environments, introducing proportionate controls that scale as capability maturity increases.
• Identify and document likely technical debt and non-compliance risks, enabling informed decision-making and prioritisation.

• Active SC Clearance
• Recent, demonstrable experience with JSP 440 in a defence setting (this is the key requirement).
• Strong understanding of Secure by Design methodologies and how to apply them in fast-moving prototype programmes.
• Experience working in low TRL/prototyping environments, scaling security controls as maturity increases.
• Confidence working across both cyber security and technical delivery teams (hardware/software blend).