Head of Product Security

Job Description

Your Impact

Do you want to play a critical role in safeguarding the integrity and security of our products?

Our Electronics Warfare (EW) and Future Combat Air (FCA) Design Integrity team are seeking a Head of Product Security. This is a pivotal role reporting directly to the Chief Engineer of Design Integrity. You’ll provide independent product security and legislative assessor assurance to make sure that; requirements have been adequately defined for product development, product plans will achieve contractual and company requirements, as well as assurance of claims and evidence for products. As Head of Product Security, your expertise and vision will ensure robust governance, the sharing of best practice, and consistent, high‑quality security outcomes across our programmes.

This role is working on a hybrid basis (3x days per week on site) can be based on our following sites Luton, Lincoln, Southampton, and Bristol.

Responsibilities will include

Operate as the Security signatory on behalf of the company. Liaison with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Participate in Product Security Panels as a specialist advisor to manage and resolve security incidents. Maintain an up-to-date knowledge of security legislation. Participate in company working groups to monitor proposed changes to the legislative environment. Provide input and advice to the product development teams. Operate as a consultant to promote security culture within Leonardo working with Security teams to ensure secure working practices are maintained. Develop and deliver training courses and speak with confidence on Product Security and Information Assurance matters. Perform audits of internal and external/subcontract teams assuring that security and Information Assurance requirements are achieved.

What You’ll Bring

Has hands-on experience of developing robust security risk management system for complex high integrity electronics systems. Familiarity with Legislation – e.g. IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATO Information Assurance standards, procedures & systems, including HMG Security Policy Framework, ISO security standards, DO326A. Familiarity with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC and Common Criteria security evaluation techniques. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating to safety. A background in design implementation of high integrity complex electronics, such as Software design to DO178C level C, Complex Electronics hardware up to DO254 Level. Experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754. Understanding of the role of advisory boards within the UK Government or NATO for security.