Jobs
>
Warrington

    Digital Security Consultant - Warrington, Cheshire, United Kingdom - KBR, Inc

    Default job background
    Description
    Security Information Risk Advisor page is loaded Security Information Risk Advisor
    Apply locations Birchwood, Cheshire, United Kingdom time type Full time posted on Posted Yesterday job requisition id R Title:
    Security Information Risk Advisor OVERVIEW

    The Programme and Project Partners (PPP) model was mobilised in 2019 with the purpose of transforming major project delivery at the Sellafield nuclear site.

    The partnership brings together KBR, Jacobs, Morgan Sindall Infrastructure, Altrad Babcock and Sellafield Ltd to deliver a 20-year pipeline of major infrastructure projects to support the decommissioning of Sellafield and to create a clean and safe environment for future generations.

    In delivering its pipeline of large-scale infrastructure projects, PPP is creating opportunities for its people, supply chain, economy and communities.

    KBR's rapidly growing nuclear team of teams is working at the forefront of the UK's nuclear space on some of the most exciting new-build, defence and decommissioning programmes.


    Job Title:
    Senior Information Risk Advisor (SIRA)
    Warrington / Cumbria, 2 / 3 days per week on site with travel to opposite site potentially once per month

    The Senior Information Risk Adviser (SIRA) is an autonomous risk role to support the PPP ITSO and Head of IT with understanding the technology risks and propose mitigations to assist in establishing and maintaining an enduring cyber security and information assurance posture.

    The role's primary function is to conduct formal risk assessments on the PPP IT environment that supports PPP business needs whilst satisfying SL and ONR/ICO Regulatory requirements.

    The role's secondary function is to assist in developing the "secure by design" approach for the delivery of programmes and projects by PPP.

    The role has a broad scope spanning technical and process risk across the cyber security, information security and privacy space and will necessitate engagement with SL CS&IA (Cyber Operations, Assurance, Risk, Data Protection), SL ISO (Architecture, Service and Knowledge Management), SL Cyber Programme and PPP Partners.

    The output will include (but is not limited to) the production of formal risk assessments conducted to the standards acceptable to SL, including but not limited to HMG IS1, IRAM 2 or other ISO27005 assessments as agreed.

    The output will be used to determine the exposure to risks and likelihood of materialisation, required mitigations and support to PPP CS&IA planning necessary to support correctness of posture, satisfy Regulatory matters.

    Formal risk assessment of the PPP O365/Azure security configuration and other systems.
    Recommendations around mitigations necessary to minimise the materialisation of identified risks in line with the SL risk framework.
    Production of risk reports to support the PPP ITSO with the PPP CS&IA Plan.
    Represents PPP cyber risk exposure in any security related working groups within SL, Regulatory or internal PPP environs.

    Analysis of system configurations and in cognisance of NCSC guidance, determination of associated risk in relation to systems or solutions developed or implemented by PPP Partners for SL.

    Assists with input to the risk tracking of PPP related cyber risks and the management of a PPP Cyber and Information security/privacy risks by the PPP ITSO for the PPP ICT Manager.

    Formal determination of cyber and information security/privacy related risks and issues.

    The Senior Information Risk Adviser (SIRA) is an autonomous risk role to support the PPP ITSO and Head of IT with understanding the technology risks and propose mitigations to assist in establishing and maintaining an enduring cyber security and information assurance posture.

    The role's primary function is to conduct formal risk assessments on the PPP IT environment that supports PPP business needs whilst satisfying SL and ONR/ICO Regulatory requirements.

    The role's secondary function is to assist in developing the "secure by design" approach for the delivery of programmes and projects by PPP.

    Qualification or membership of a professional body in Information Security.
    Significant experience in applying Cyber Security Standards.
    Cyber Security threats and exploitation.
    Ability to interpret business requirements and technical ICT documents into Cyber Security requirements.
    Good understanding and knowledge of ICT systems (software, hardware and networks) and applications both legacy and current.

    Good communication skills across all levels of the business and able to talk to non-specialists, specialists, and senior stakeholders.

    Hold or be capable of obtaining government clearance (SC/SL – Nuclear).

    Ideally qualified at a minimum of degree level in an IT, Cyber Security, or associated technical or engineering studies.

    Experience of working with operational cyber security teams.
    ~ Due to the nature of our work and security requirements, KBR does not offer sponsorship. We are an Equal Opportunities employer and strive to build a workforce that truly reflects the communities we represent. We welcome candidates from all backgrounds, regardless of age, disability, gender, gender identity, gender expression, race, religion or belief, sexual orientation, socioeconomic background, and any other protected characteristic. LI-JI1 #LI-HYBRID

    KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives.

    We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

    We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

    We believe doing what's right for the planet, the communities where we work, and our people is good for business.

    We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function.

    Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

    Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries.

    Fraud has infiltrated the job placement market via the internet, email and direct phone contact. Bad actors may mix in fake job advertisements with legitimate postings.

    These ads can include contact instructions and require job seekers to send sensitive personal information or money to pay for visa applications, processing fees, etc., in exchange for consideration for a high-paying position.



  • Barclays Knutsford, United Kingdom

    Barclays is one of the world's largest and most respected financial institutions, with 329 years of success, quality and innovation behind us. We offer careers that provide endless opportunity - helping millions of individuals and businesses thrive, andcreating financial and digi ...

  • NCC Group

    Security Consultant

    1 week ago


    NCC Group Manchester, United Kingdom

    Role: Security Consultant · - Division: Consulting & Implementation (C&I) · - Role Purpose · - Our world is getting ever more dependent on connectivity, and this is your opportunity to join our Telecommunications Assurance Practice, focussed on delivering world-class cyber securi ...

  • Nigel Frank International

    Security Consultant

    4 days ago


    Nigel Frank International Manchester, United Kingdom

    A technology-driven company at the forefront of the most rapidly expanding industry in the world. Currently working as a small team that makes a very large impact, the company is seeking to answer some of the most interesting questions out there. They move fast, value autonomy an ...

  • Akkodis

    Security Consultant

    6 days ago


    Akkodis Manchester, United Kingdom

    Penetration Tester · Location: Remote Based · I am working on an exciting opportunity to join a growing boutique organisation. · Previous experience with Security Testing is a bonus · You should be able to demonstrate the following: · *Mobile Apps Pen Testing - Android / iOS (Des ...

  • Akkodis

    Security Consultant

    1 week ago


    Akkodis Manchester, United Kingdom

    Penetration Tester · Location: Remote Based · I am working on an exciting opportunity to join a growing boutique organisation. · Previous experience in Security Testing is a bonus · You should be able to demonstrate the following: · *Mobile Apps Pen Testing - Android / iOS (Desir ...


  • Barclays Knutsford, United Kingdom

    **Principal Security Consultant** · **Knutsford** · As a Barclays Technical Security Project Manager, you will be responsible for leading a team to deliver security services and develop product intimacy for business and technology clients and will also be identify opportunities t ...


  • Maxwell Bond Manchester, United Kingdom

    **Cyber Security Consultant** · **South Manchester - Hybrid** · **£40,000 - £50,000** · I am currently partnering with one of the fastest growing tech companies in the northwest. They specialise in preventative cyber security and are seeking a Cyber Security Consultant to join th ...


  • Cyber Security Specialists Manchester, United Kingdom

    **Cyber Security Consultant** · Based in Manchester UK, we are an independent Cyber Security Consultancy providing Security Consultancy and Managed Security services across a wide range of markets, from multi-national Corporate Organisations and Government Agencies, through to sm ...


  • Humanity Manchester, United Kingdom

    Company Description · Jobs for Humanity is dedicated to building an inclusive and just employment ecosystem. Therefore, we have dedicated this job posting to individuals coming from the following communities: Refugee, Neurodivergent, Single Parent, Blind or Low Vision, Ethnic Min ...


  • 4way consulting Ltd Manchester, United Kingdom

    understanding to get the job done. · Consistently ranked in the top ten of ITS consultancies in the annual CIHT Consultants Directory, we are expanding our capabilities and project portfolio. We are therefore seeking enthusiastic and highly motivated people with cyber skills to g ...


  • Appcastenterprise Manchester, United Kingdom

    **Job Description** Cyber Security Consultant · Position Description · Trusted to think critically · If you're ahead of the game on cyber security, systems and operations risk, we can secure your career ambitions. · Our Cyber Security Consultants are trusted to work closely on a ...


  • Secarma Ltd Manchester, United Kingdom

    **The Role** · Our programme involves a mix of formal training and genuine work experience. You'll be working alongside experienced Cyber professionals from the start. It will be challenging but rewarding. · Daily you'll be involved in: · 1. Analysing vulnerabilities and cyber se ...


  • Sanderson Recruitment Plc Manchester, United Kingdom

    Delivery of end-to-end security testing engagements, including scoping and client wash-up meetings. · - Production of detailed reporting and presentations for both technical and non-technical stakeholders. · - Safe and responsible use of testing tools, ensuring controls are in pl ...


  • Predatech Manchester, United Kingdom

    Predatech is a CREST-accredited penetration testing organisation focused on delivering high-quality technical security. We're based in Manchester and are a cyber security partner to over 150 organisations across the UK, including some of the largest companies in the world. · We'r ...


  • AECOM Manchester, United Kingdom

    Company Description · Work with Us. Change the World. · At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's tr ...


  • Myles Roberts Greater Manchester, United Kingdom

    Myles Roberts are partnering with a Tier 1 Bank to hire a Lead Cloud Security Analyst with 5+ years of experience in a Cyber Security Senior Analyst role (or similar). The Lead Cloud Security Analyst will report into the Cloud Security Manager or Operations Manager and are respon ...


  • Nymle Manchester, United Kingdom

    For our client DWP we are seeking an experienced cyber security architect to join a new function in the Digital Architecture team, creating a Secure Design team that will ensure security architecture considerations are built into all DWP Digital solution designs from the outset. ...


  • AXA UK Bolton, United Kingdom

    **About the role**: · It's an exciting time to join the Security team here at AXA, with significant investment planned in all UK&I businesses to transform, deliver new digital services to our customers and streamline our business processes. With a consultative approach and a vari ...


  • Predatech Manchester, United Kingdom

    Predatech is a CREST-accredited penetration testing organisation focused on delivering high-quality technical security. We're based in Manchester and are a cyber security partner to over 150 organisations across the UK, including some of the largest companies in the world. · We'r ...


  • Humanity Manchester, United Kingdom

    Company Description · Jobs for Humanity is dedicated to building an inclusive and just employment ecosystem. Therefore, we have dedicated this job posting to individuals coming from the following communities: Refugee, Neurodivergent, Single Parent, Blind or Low Vision, Ethnic Min ...