Project Security Lead; SbD

Project Security Lead – Corsham, UK

Up to £700 per day inside IR35 Hybrid working, 2 days onsite per week 24-month contract

Our client is a well-established organisation delivering complex technology programmes within a secure government environment. Operating at the forefront of digital transformation and cyber resilience, they play a critical role in protecting sensitive systems and services.

Due to ongoing programme demand, they are seeking an experienced Project Security Lead to strengthen cyber governance and risk management across a key capability.

• Exposure to large scale Defence digital programmes
• Long term, stable contract
• High profile Defence programme environment

As Project Security Lead, you will report into the Programme CISO and take ownership of security risk management across the system lifecycle. You will embed Secure by Design principles, ensure compliance with JSP 440 and JSP 453, and align activities to frameworks such as National Institute of Standards and Technology RMF and CSF.

You will oversee continuous assurance, manage risk assessments and treatment plans, support IT health checks, and ensure appropriate governance controls are implemented and monitored. The role requires close engagement with programme teams, assurance bodies, and senior stakeholders, translating cyber risk into clear business impact.

• Proven experience in a security risk or cyber governance role within Defence or Government
• Strong working knowledge of JSP 440, JSP 453 and wider MOD security policy
• Experience operating within NIST RMF or CSF frameworks
• Production of Security Management Plans, Risk Assessments, and related artefacts
• Knowledge of vulnerability management, incident response and patch management
• Ability to manage stakeholders and represent security at working groups
• Desirable certifications include CISSP, CISM, CRISC or similar

Please either apply through this advert or email me directly via rob For further information please call me on

By applying for this role, you give express consent for us to process and submit, subject to required skills, your application to our client in conjunction with this vacancy only.

Project Security Lead, Cyber Security, NIST RMF, JSP 440, JSP 453, Risk Management, Secure by Design, Defence, Governance, NSD