Information Assurance Technical Security Specialist

Location:

Crawley, United Kingdom Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services.

Multiple office locations considered (Doncaster, Crawley, Reading, Cheadle, Bristol) Thales is a global technology leader in the Aerospace, Defence and Digital Security sectors, operating across 68-countries and continuing to expand. We are heavily investing in digital and - "deep tech" innovations
- Big Data, artificial intelligence, connectivity, cyber security and quantum technology - to build a future we can all trust. We're recruiting for an Information Assurance/Technical Security Specialist to provide technical security advice and guidance on the efficient and effective secure through-life management of systems related to the use, processing, storage, and transmission of Thales information or data. Reporting to the Thales UK Deputy CISO, the Information Assurance/Technical Security is responsibility for the identification of applicable technical security requirements and their associated cost-effective security controls as well as through-life continual security assurance of Thales IS environments throughout their design, implementation, transition into service, and operational lifespans.

We're looking for an individual who has exposure to complex enterprise IT systems, ideally within a regulated or safety critical environment. Our environment crosses multiple sectors from Aerospace and Defence, through to Cyber, Finance and Air Traffic Management.

• Technical Security:
  Support Thales UK in ensuring all IS/IT technical security measures are implemented, enhanced and developed where necessary, to ensure successful and timely security assurance via on-going through-life continual assurance and compliance programmes.
• Technical Security Point of Contact (PoC):
  Provide a central PoC for all IS/IT technical security matters and concerns, supporting delivery teams and businesses throughout project life cycles.
• Change management:
  Conduct security reviews of internal/ externally connected platform related changes ensuring Security risks, impacts and mitigations are managed appropriately.
• Cloud Security: provide security guidance around the secure deployment and usage of Thales adopted public cloud infrastructure and/or SaaS services (e.g., Azure) in compliance with government security guidelines, Thales's policy and industry accepted "good practices" for security.
• Compliance & Governance: ensure Thales on-premises and cloud environments comply with government policies, such as Cyber Essentials, Def Stan 05-138, UK GDPR, NCSC guidelines and other applicable contractual and regulatory frameworks.
• Evidence Continual Security Assurance:
  Creation, Maintenance and Review of all IS/IT technical security documentation, policy and procedures associated with Thales’ IS/IT networks, systems and applications, as per Customer (primarily HMG UK MOD) and Thales Group policy and mandatory requirements.
• Incident Response:
  Be responsible for the reporting, investigation and analysis of security incidents and potential breaches within classified environments, working with the Thales UK Incident management team to ensure identified issues are resolved quickly.
• IS/IT Squad Engagement:
  Develop security requirements, epics and stories, along with guidance & governance to squads to ensure data protection and data security are included in the scope of new and existing IS/IT Squad activities, initiatives and projects.
• Risk Focused Delivery:
  Able to work collaboratively with other team members to ensure proposed solutions provide the required level of security assurance in line with data processing requirements, as well as Thales and customer risk appetites.
• Risk Management:
  
  Responsibility for developing and…