Defence Digital Cyber Investigations Supply Chain Associate

**Details**:
**Reference number**:

- 406078

**Salary**:

- £36,530
- Appropriate London weighting will be applied to London based roles.
- A Civil Service Pension with an employer contribution of 28.97%

GBP

**Job grade**:

- Higher Executive Officer

**Contract type**:

- Permanent

**Business area**:

- MOD - Strategic Command

**Type of role**:

- Risk Management
Security
Other

**Working pattern**:

- Flexible working, Full-time, Job share, Part-time

**Number of jobs available**:

- 1

**Contents**:

- Location
- About the job
- Benefits
- Things you need to know

**Location**:

- This position can be based at either MOD Main Building, Whitehall, London SW1A 2HB, MOD Corsham, Westwells Road, Corsham, Wiltshire SN13 9NR or RAF Wyton, Huntingdon, PE28 2EA.

**About the job**:
**Job summary**:
Defence Digital ensures our Armed Forces remain among the most technologically advanced in the world. We do this by putting innovative and effective technology into the hands of over 200,000 users, from the boardroom to the front line.

We lead on cutting-edge data science, automation, and cybersecurity at scale. Our mission goes beyond the battlefield by leading humanitarian efforts and driving digital innovation that impacts lives across the globe.

Defence Digital forms part of Strategic Command which manages the MOD’s joint capabilities for the Army, RAF, and Royal Navy.
- **Watch** to find out more about what we do.

Passionate about using your skills to make a critical difference? Your next career move could be here.

This position is advertised at 37 hours per week.

**Job description**:
The Cyber Investigations Supply Chain Fusion team works within our Cyber Defence and Risk Directorate and is responsible for:

- engagement with core stakeholders across Defence and industry.
- assistance in integrating the Defence supply chain as part of wider cyber Investigation activities, highlighting potential vulnerabilities and the associated cyber risks.
- the analysis of trend data within the Defence supply chain.

As Cyber Investigations Supply Chain Associate, you’ll support the assessment and analysis of the Defence supply chain and its associated processes, to identify potential cyber security risks and vulnerabilities, recommend mitigation strategies and drive continuous risk improvement.

**Responsibilities**
- Support the development and integration of the approach for proactive follow-up actions of poor performance by the supply chain.
- Lead data analysis into an understanding of triggers to risk events.
- Collaboration with wider teams to ensure the fusion of supply chain with technology, people processes and behavioural elements, as part of cyber investigations.
- Support activities to hold supply chain to account for remediation actions, following investigation activities.
- Conduct thorough assessments of supply chain processes to identify potential cyber security risks, recommend mitigation strategies and enhance overall security posture, in alignment with MOD standards.
- Support departmental and wider work to develop mechanisms to drive continuous improvement and encourage the sharing of best practice.

**Person specification**:
We would expect to see relevant skills and experience in data analysis, information management, risk management and/or governance and data protection. You should also have security and technology knowledge and an understanding of cyber threats, associated methodologies and frameworks, such as Mitre ATT&CK and NIST.

You’ll need:

- Acute attention to detail.
- Great organisation, timekeeping and prioritisation skills.
- Initiative and analytical skills.
- To be personable, task focused and able to build relationships with the core team and wider colleagues.
- Motivation, commitment and the desire to continue to learn and develop.
- Experience or knowledge of leading, supporting, coaching and mentoring colleagues.

**Additional details**:
There may be a requirement to travel within the UK (or potentially occasional overseas visits) for meetings, training or operational reasons.

If not held already, opportunity will be provided to gain the following qualifications when in post:

- Certificate in Information Security Management Principles (CISMP)
- Certificate in Information Security Management (CISM)
- Certified Information Systems Security Professional (CISSP)

This job role may be suitable for hybrid working, which is an informal, non-contractual and voluntary arrangement, blending a balance of attendance in the workplace (your permanent duty station, which is based on business assessment of where the work is best done) and working from home as a personal choice (if the role is suitable for this). If you are successful, any opportunities for hybrid working will be discussed with you prior to you taking up your post. Whilst embracing hybrid working, there is an expectation that attendance in office will be required at least 2 days a week.

**This position is open to sole UK