Product Cyber Resilience Manager
// Role Summary
Drive product cyber resilience for cutting-edge defence technology, ensuring Secure by Design principles are embedded throughout the product lifecycle. This role offers a chance to significantly impact national security and global defence.
// Key Responsibilities
- Lead security assurance across the full product lifecycle.
- Develop and manage security protocols, tools, and processes.
- Conduct independent Information Assurance (IA) reviews and risk assessments.
- Collaborate with engineering teams to embed security into design.
- Contribute to shaping UK-wide security best practice and strategy.
// Role Specification
Product Cyber Resilience Manager
Leonardo UK is seeking a passionate Product Cyber Resilience Manager to protect cutting-edge technology and champion Secure by Design principles. This is a vital role in shaping national security and global defence innovations.
The role involves ensuring our systems and products meet the highest standards of security assurance. You will collaborate with brilliant minds in software, systems, and electronics, facing new challenges daily and gaining satisfaction from securing world-class solutions.
Key Responsibilities:
- Drive Security Assurance through the full product lifecycle, ensuring designs are robust, compliant, and resilient.
- Develop and manage security protocols, tools, and processes to stay ahead of emerging threats.
- Provide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects.
- Contribute to Leonardo’s UK-wide Security and IA community, influencing best practice and security strategy.
- Create and manage key artefacts such as Security Management Plans, Risk Assessments, and Remediation Action Plans.
What You'll Bring:
We are looking for an experienced professional with a proven track record in managing product security for highly regulated systems. Essential skills include:
- Expertise in conducting risk assessments, applying security controls, and developing IA documentation.
- Ability to interpret penetration test findings and create remediation action plans.
- Awareness of UK Government Assurance frameworks.
- Degree in Engineering (or a related field) and a relevant certification (e.g., CISSP, CISM).
- Substantive experience in product security and hands-on experience with risk management frameworks like NIST SP800-37, ISO27001, and Secure by Design principles.
While experience in all listed areas is beneficial, a positive attitude and willingness to learn are highly valued.
Location and Working Arrangements:
This role can be based in Basildon, Southampton, Luton, or Bristol, with hybrid working options (on-site up to 4 days per week). Occasional travel to UK and overseas customers, suppliers, and other Leonardo sites will be required.
Security Clearance:
This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). Further Personnel Security Controls (National Security Vetting - NSV) may apply, potentially including eligibility for Security Check (SC) or Developed Vetting (DV).