Security Consultant – Defence & National Security

About the role

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions for Defence and National Security missions. You will work in highly secure environments, collaborating with engineers, architects, and delivery specialists to enable faster, safer decision‑making for critical operations.

Key responsibilities

• Manage cyber risk within the Defence and Security sector.
• Provide strategic governance, risk and compliance (GRC) direction for projects.
• Engage with MOD stakeholders—including project teams, users and policy owners—to define security objectives and requirements.
• Collaborate with Software Engineering, DevSecOps, Infrastructure, Agile Development and Support teams to achieve security outcomes.

Required profile

• Experience conducting risk assessments using industry‑approved methodologies such as NIST and ISO 27005.
• Proven ability to produce clear, actionable risk treatment plans aligned to security objectives.
• Background in supporting compliance and assurance activities, including audits, control testing and evidence gathering.
• Strong written communication skills for creating security documentation and translating technical risks into business language for senior stakeholders.

Required skills

• NIST risk assessment framework
• ISO 27005 methodology
• Governance, Risk & Compliance (GRC) processes
• Security documentation (design, policies, test plans, risk management plans)
• Agile, DevSecOps and CI/CD principles in secure environments
• Knowledge of MOD policies (JSP 440, 453/604, 892)