Information Security Adviser

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

**Overview**

An exciting opportunity has arisen for an Information Security Adviser to join Boeing Defence UK in Waddington, Lincolnshire, UK with some possibility of flexible work arrangements.

BDUK is seeking an Information Security Adviser to deliver the security aspects of a defence training system programme. The role will be expected to; support the design, management and production of a Risk Management and Accreditation Document Set (RMADS) and other supporting security artefacts; support programme expansion, including the integration of new of new sites and the maintenance of system accreditation; support the security oversight of the system, and; liaise with the accreditor to enable programme execution.

**Role Activities**
- Identifying security risks within complex air/ground computer and information systems and developing for implementation, effective and risk balanced security measures.
- Providing security documentation and evidence to meet HMG (MOD) security accreditation requirements.
- Liaison with customers, accreditors and technical authorities, including attendance at security working groups.
- Performing security analysis of operational environments, threats, vulnerabilities and internal interfaces to define and assess compliance to accepted industry and government standards
- Contributing to the development of information governance and risk management structures and processes.
- Assisting in the integration of information assurance activities with the system engineering, design and manufacturing elements of new business ventures and programmes.
- Engaging with stakeholders, the engineering team and sub-contractors to provide direction, guidance and support on acceptable and balanced information security solutions.
- Developing business and user focused security policies, procedures, processes and operational guidance for the compliant delivery of customer information security requirements.
- Maintaining knowledge of technology development (both hardware and software), threat actors, tools and techniques and the risk implications for information security.

**Typical Qualifications/Education**
- Preferably qualified to degree level (or equivalent) or with substantial relevant information security experience, particularly within a similar role in UK Government or Defence.
- Relevant industry security certifications would be advantageous (e.g. CCP (Ex-CLAS), CISSP, CISM).

**Knowledge/Competences**
- Knowledge and understanding of MOD and Government information security policy, standards and guidance.
- Understanding of systems and security verification, validation, testing and evaluation approaches, including HMG Information Assurance schemes and processes.
- Knowledge and understanding of CESG CAPS and CPA processes and evaluations.
- Experience in generation of information security Risk Assessments, Risk Treatment Plans and Risk Management and Accreditation Documents.
- Experience in the specification and development of effective and balanced information assurance solutions or approaches.
- Ability to analyse the security aspects of business risks
- Pragmatic approach to the recommendation of security controls.

**Preferred**
- Experience of working with and accrediting a Classified system.
- Experience of assuring IT systems in a secure government environment (MOD) would be a distinct advantage.
- Information assurance experience across the Systems Engineering, Development Lifecycle would be preferred.
- Experience of participating in developing security solutions in response customer requirements.
- Detailed understanding of data protection controls and practices.
- Knowledge of computer security audit and investigative techniques is desirable.

**General**:

- Experience of working within a multinational matrix management environment / structure and a large-scale, complex international organization, but also within small teams, would be highly advantageous.
- Ability to plan, prioritise and manage own workload with limited day-to-day supervision, butt know when to seek assistance/escalate.
- Effective written and verbal communication skills with ability to adapt depending on audience; ability to explain technical issues in simple language to non-technical consumers is essential.
- Ability to contribute to cost, schedule adherence, and technical performance trade-offs.
- Clear task focus with ability to separate out and communicate key elements from extraneous detail.

**Other Information**:
The post will be located in Waddington with some travel within UK (up to 30% distraction) and occ