The Boeing Company Information Security Advisor in Bristol, United Kingdom
At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.
Due to continued business growth there is an opportunity to join a multi-skilled team that delivers professional services to a National Security customer. BDUK is seeking an experienced Information Security Adviser to work alongside other Boeing team members in the delivery of a portfolio of projects for our customer. Security aspects of such projects can range from advising and application of security concepts through to proposing and implementing security controls to mitigate specific risks. The post holder will also have experience of systems accreditation, ideally where working with Cloud. This is a full time position based at Bristol and Gloucestershire.
Identifying security risks within complex computer and information systems and developing for implementation, effective and risk balanced security measures.
Ensure Supply Chain Security Assurance through application of the Defence Cyber Protection Partnership (DCPP) and other relevant standards and policies.
Providing security documentation and evidence to meet HMG (SPF) security accreditation requirements.
Liaison with customers, accreditors and technical authorities, including attendance at Security Working Groups.
Performing security analysis of operational environments, threats, vulnerabilities and internal interfaces to define and assess compliance to accepted industry and government standards
Contributing to the development of information governance and risk management structures and processes.
Assisting in the integration of information assurance activities with the system engineering, design and manufacturing elements of projects and programmes.
Engaging with stakeholders, engineering teams, teammates and sub-contractors to provide direction, guidance and support on acceptable and balanced information security solutions.
Developing business and user focused security policies, procedures, processes and operational guidance for the compliant delivery of customer information security requirements.
Maintaining knowledge of technology development (both hardware and software), threat actors, tools and techniques and the risk implications for information security.
Preferred education / qualifications:
Preferably qualified to degree level (or equivalent) or with substantial relevant information security experience, particularly within a similar role in UK Government or Defence.
Relevant industry security certifications would be advantageous (e.g. CCP (Ex-CLAS), CISSP, CISM).
Knowledge and understanding of MOD and Government information security policy, standards and guidance.
Experience of assuring IT systems in a secure government environment
Understanding of systems and security verification, validation, testing and evaluation approaches, including HMG Information Assurance schemes and processes.
Knowledge and understanding of CESG CAPS and CPA processes and evaluations.
Experience in generation of information security Risk Assessments, Risk Treatment Plans and Risk Management and Accreditation Documents.
Experience in the specification and development of effective and balanced information assurance solutions or approaches.
Ability to analyse the security aspects of business risks
Pragmatic approach to the recommendation of security controls.
Ability to plan, prioritise and manage own workload with limited day-to-day supervision, but know when to seek assistance/escalate.
Experience of working within a matrix management environment/ structure and a large-scale, complex international organisation, but also within small teams, would be highly advantageous.
Experience of working with and accrediting Cloud architecture
Information assurance experience across the Systems Engineering, Development Lifecycle would be preferred.
Experience of participating in developing security solutions in response to customer requirements.
Detailed understanding of data protection controls and practices.
Knowledge of computer security audit and investigative techniques is desirable.
Effective written and verbal communication skills with ability to adapt depending on audience; ability to explain technical issues in simple language to non-technical consumers is essential.
Ability to contribute to cost, schedule adherence, and technical performance trade-offs.
Clear task focus with ability to separate out and communicate key elements from extraneous detail.
Work Authorisation: This requisition is for a locally hired position in the UK. Candidates must have current legal authorisation to work immediately in the United Kingdom. Boeing will not attempt to obtain Immigration and labour sponsorship for any applicants. Benefits and pay are determined at the local level and are not part of Boeing U.S. based payroll.
Security Clearance: This position requires the ability to obtain a UK security clearance for which the Government requires UK Citizenship.
Relocation: This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.