Operations & Assurance Security Manager

About the role

SiXworks is seeking an Operations & Assurance Security Manager to lead the development and maintenance of information security, risk management and compliance frameworks for defence and national security projects. You will ensure that systems, processes and data are protected against threats while meeting regulatory and corporate governance requirements.

Key responsibilities

• Define and maintain security policies, standards and procedures aligned with ISO 27001, Cyber Essentials, JSP 453 and JSP 440.
• Oversee the cybersecurity strategy, including regular vulnerability assessments and penetration testing.
• Lead incident response and remediation activities for security events.
• Manage security and operational risks across contracts and ensure Secure‑by‑Design evidence packs are up to date.
• Coordinate internal and external audits, providing assurance reporting to senior management.
• Ensure compliance with GDPR, the Data Protection Act and other relevant legislation.
• Collaborate with IT, operations and business teams to embed security practices and deliver training.
• Maintain relationships with external partners, vendors and auditors.

Required profile

• Proven experience in security management, risk assurance and compliance within a regulated environment.
• Ability to lead cross‑functional teams and communicate security concepts to senior stakeholders.
• Strong analytical mindset with a focus on continuous improvement of security programmes.

Required skills

• ISO 27001
• Cyber Essentials
• JSP 453
• JSP 440
• GDPR
• Data Protection Act
• Penetration testing
• Vulnerability assessment
• Incident response
• Security policy development
• Risk management