Key skills
Risk Management
About this role
Role Overview
- Defining product security requirements, advising development teams on suitable implementation standards and techniques and supporting product development activities.
- Develop and manage security protocols, tools, and processes that keep our technologies ahead of emerging threats.
- Creation and management of key artefacts such as, Risk Assessments, and Remediation Action Plans.
- Drive Security Assurance through the full product lifecycle, ensuring every design is robust, compliant, and resilient.
- Contributing to continual improvement of the engineering capability.
- Contribute to Leonardo’s UK-wide Security and IA community — shaping best practice and influencing security strategy.
- Liaison with Security experts, including the head of product security and Product Cyber Resilience Managers to support ongoing Security Assurance.
Requirements
- Practical experience of ISO27001 /27004/27005 and NIST Risk Management Framework (RMF).
- Experience of supporting a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear, automotive, rail or oil and gas.
- Understanding and appreciation of the Engineering development lifecycles and how the Product Security specialism aligns.
- Ability to interpret Penetration Test Reports and support remediation action.
- Awareness of UK Government Assurance Processes (such as the legacy JSP 604 Assurance or the CAF GovAssure processes).
Benefits
- Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.
- Secure your Future: Benefit from our award-winning pension scheme with up to 15% employer contribution.
- Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).
- Rewarding Performance: All employees at management level and below are eligible for our bonus scheme.
- Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning.
- Refer a friend: Receive a financial reward through our referral programme.
- Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more.
- Flexible working: Flexible hours with hybrid working options.