Public Sector Resourcing
Cyber Security Technical Delivery Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
On behalf of the MOD we are looking for a Cyber Security Technical Delivery Manager (Inside IR35) for a 12 month contract. Hybrid working based in Glasgow.
About the Role
The Ministry of Defence (MOD) is a central government department with a mission to protect our country and provide the ultimate guarantee of its security and independence, as well as helping to protect its values and interests abroad.
The Ministry of Defence is looking to engage a security professional to provide technical delivery management and security support for the Corporate Services Modernisation Programme, encompassing People, Finance and Commercial solutions using HCM and ERP technology.
Responsibilities
As a Cyber Security Technical Delivery Manager your main responsibilities will be to:
- Produce and maintain the cyber security technical delivery plan, including dependencies, milestones, risks, issues and decisions.
- Lead end-to-end cyber security assurance across the CSM solution, ensuring that security controls, risks and assurance evidence are coherent across applications, integrations, data flows, infrastructure, suppliers, operational processes and service management arrangements.
- Lead Secure by Design, cyber security assurance, and risk management activities across projects, programmes, and services, ensuring security risks are identified, assessed, mitigated, and managed in accordance with MoD policy, standards, and risk appetite.
- Act as the senior cyber security advisor to business, programme, commercial and supplier stakeholders, influencing acquisition strategies, security requirements, governance decisions and the integration of security throughout the solution lifecycle.
- Coordinate cross-supplier cyber security assurance, Coordinate cyber security assurance activities across cloud-hosted services, suppliers and system integrations, ensuring security requirements, remediation activities and assurance evidence are planned, monitored and delivered in line with programme milestones.
- Manage cyber security RAID material in JIRA, or the agreed programme tooling, ensuring risks, issues, actions and decisions are visible and actively managed.
- Align cyber security delivery activity with EATD, functional workstreams, business change, commercial activity and supplier delivery plans.
- Maintain visibility of security-critical dependencies across the CSM landscape, including applications, integrations, data flows, infrastructure, suppliers, operational processes and service management arrangements.
- Provide cyber security input to the CSM Portfolio implementation plan and release roadmap.
- Own supplier and third-party security assurance, including assessing supplier security posture, conducting security reviews, defining security requirements, managing information-sharing and release activities, and ensuring effective remediation of identified security vulnerabilities and compliance issues.
- Develop and maintain security governance frameworks, methodologies and artefacts, including security requirements, Security Aspects Letters, grading guides, risk assessments, assurance plans and approval documentation to support informed decision-making.
- Drive continuous improvement in cyber security and supply chain resilience, identifying security gaps, monitoring supplier performance, strengthening assurance processes, and ensuring compliance with the MOD Security Risk Management Framework, Secure by Design principles, and relevant legal and regulatory obligations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Requirements
- An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. (Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.)
- Experience delivering or coordinating cyber security assurance activities within complex cloud-hosted environments, including SaaS, PaaS and IaaS services.
- Experience of working within a large-scale complex digital modernisation programme.
- Experience of using industry-recognised security frameworks within secure solutions, including ISO/IEC 27001, NIST CSF and NCSC CAF.
- Oracle experience.
- Experience managing delivery plans, dependencies, RAID material and assurance evidence using programme delivery tooling.
- Experience working across multi-supplier delivery environments.
- Experience aligning cyber security activity with architecture, technical delivery, functional workstreams, business change and service transition.
- Good planning, problem-solving and organisational skills.
- Excellent verbal and written communication skills.
- Excellent interpersonal skills.
- Good digital skills, including proficiency in office applications, information collaboration software and industry-recognised technical project tooling.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Requirements
- Knowledge of MOD Security Policies, processes, structures and tooling.
- Experience of MOD or Government Digital Service ways of working.
- Knowledge of MOD corporate services, shared services, HR, finance or commercial systems.
- Experience of identity and access management, privileged access management, data protection and cloud service assurance.
- Experience supporting cyber security assurance activities across enterprise business systems and supplier-hosted service environments.
- Experience assessing cloud service providers, shared responsibility models, integration security and supplier security controls.
- Experience of supplier security management in complex public sector environments.
- Managing Successful Programmes, Agile, PRINCE2 or equivalent delivery qualification.
Please be aware that this role can only be worked within the UK and not Overseas.
Disability Confident
As a member of the Disability Confident Scheme, the MOD guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.
This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
Armed Forces Covenant
The MOD guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.
Off Payroll Working in the Public Sector
In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different."
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills