Find your next tech and IT Job or contract role.

Information Security and Assurance Advisor Leek Wootton Permanent opportunity JOB PURPOSE: To provide expert guidance and specialist advice on all aspects of information assurance, security, and risk management. The role ensures the development and implementation of relevant policies, procedures, and processes necessary for compliance with national standards and codes of connection for information systems. This role includes maintaining the Information Security Incident Register, coordinating investigations into reported incidents, and recommending corrective measures to prevent recurrence. The postholder will also undertake onsite audits of facilities and assessments of third-party suppliers to ensure compliance with expected security and assurance standards. Additionally, the role supports departments with completing Data Protection Impact Assessments and offers professional advice on information assurance and security-related matters. MAIN RESPONSIBILITIES: Support the Information Security and Assurance programme to ensure assurance and compliance processes meet national standards and reporting requirements (e.g. SyAP). Develop, review, and implement policies and best practices for managing information and cyber security, in alignment with organisational needs. Establish and apply techniques to regularly assess compliance of information assets with legal, regulatory, and best practice requirements. Serve as a point of contact for queries on information security and assurance. Plan and conduct information security audits and compliance checks, ensuring the security of systems, data, and physical assets across the organisation and third-party entities. Identify and assess security requirements, producing Risk Assessment Reports and reviewing related documentation for new or evolving systems, assets, and processes. Coordinate the investigation and reporting of information security incidents, ensuring appropriate remedial action is taken and trends are monitored. Prepare and deliver training, education, and awareness sessions related to information security, assurance, and risk management. Work collaboratively with key internal and external stakeholders-including third-party suppliers-ensuring best practices and compliance with relevant legislation and standards. Stay informed on developments in legislation, practices, and tools related to information security and data protection, fostering continuous improvement and innovation. Represent the organisation in internal and external meetings, promoting information security standards and contributing to relevant partnerships and working groups. Perform other duties as appropriate to the nature and level of the role. Regular travel across operational areas may be required. PERSON SPECIFICATION Knowledge: A Levels or equivalent. Recognised qualification in information security, data protection, or risk (e.g. CISM, CISSP, CRISC, BCS DPO, etc.). In-depth understanding of ISO 27001, NIST, or other relevant security frameworks. Up-to-date knowledge of data protection legislation and associated best practices. Understanding of cross-functional areas affecting security (e.g. HR, procurement, tech infrastructure). Familiarity with principles of information confidentiality, integrity, and availability. Experience: Operational delivery of security assurance in a multi-site environment. Managing compliance with standards like PSN or SyAP. Developing and enforcing information security and assurance policies. Performing internal audits and managing accreditation processes. Facilitating high-level stakeholder engagement. Collaborating with external agencies and partners on security issues. Key Skills: Ability to manage workloads, meet deadlines, and adapt to changing priorities. Strong communication and interpersonal skills for influencing and explaining complex topics. Discretion and professionalism when handling sensitive information. Capability to work independently on complex investigations.

Job Title: Principal Software Assurance Engineer Location: Barrow-In-Furness, Filton, Frimley, Broad Oak, Brough or Weymouth. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Competitive What you’ll be doing: Work with our customer to agree an acceptable approach to risk Plan and carry out software assurance activities including reviews of plans, processes, witnessing testing, inspections and auditing Review software plans, documentation and software aspects of system level plans and documents to provide timely and meaningful feedback Engaging with System Designers, Software Developers and other engineering disciplines in the design process to ensure that software meets requirements Document the level of risk, provide evidence and reporting for Senior Management Work with a range of stakeholders at all levels to resolve non-conformances and programme risks Your skills and experiences: Essential: Familiarity with various software types, including programmable electronics, is beneficial, though in-depth expertise in all areas is not required. A strong grasp of software lifecycle principles and their application across different software types is essential Understanding of the systems engineering lifecycle and its relationship to software development Strong logical thinking and problem-solving skills, with the ability to find practical solutions and align stakeholders with the resolution Desirable: Experience of Software Assurance methods and processes, including audit and review Understanding of the application of software engineering, security, quality and safety standards Ability to understand strategic direction and tailor actions to support this Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The team: This is a growing role within our business and industry with significant potential for development and further growth. We expect the candidate to quickly develop an understanding of the development, use and control of software in our complex and unique application. Being actively involved in the decision making and problem resolution for some of the most critical aspects of our design. This opportunity offers a uniquely broad view of the SSNA programme, business and customer organisations which offers significant development both technically and personally. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 10th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-SC1 #LI-Hybrid

IT Security Manager Our Client is a large international organisation who are looking to recruit an IT Security Manager with at least 5 to 8 years proven expertise. Provide advice, support and guidance to all Company Corporate functions to assist them to maintain and improve their information security maturity. To work collaboratively with all areas of the Company Corporate and build networks and relationships to promote Information Security. • Act as subject matter expert on for IT Security, including legal and regulatory compliance • Advise Company Corporate functions on how to achieve the required controls and assist with solutions to support them. Eg Support in the development of standards and their application in line with Group security policies. • Participate in Company BU’s Projects giving support, guidance, control validation and overall security assurance. This could also involve sitting on major project steering committees. • Support and encourage the ethos and methodology of security by design. • Aid GRC to build, implement and facilitate a mechanism to aid BU’s to assess and measure their security compliance to policies. • Drive the development of BU/Divisional security roadmaps. Giving oversight of key non-conformities to feed into the CISO roadmap. • Coach, train and educate the Company IT and Functions to up skill and increase the security maturity in BU’s. Be an active member of the Company’s IS Security community, contributing to and leveraging the experience and lessons learned from other BU’s • Produce, implement and standardise protocol and guidance material to support Business unit activities �\" examples �\" Asset register templates, third party due-diligence. • Facilitate and chair the security working group meetings • Engage and manage third party relationships to support the Company and its affiliates • Aid Procurement and the tendering process • Raising the security baseline controls and standardising where it makes sense to do so. • Understanding the different business requirements and aligning to their objectives Support Security operations to continuously improve information security awareness across the group, including phishing campaigns and associated reporting Experience • Experience in an information security risk leadership role within a large organisation. • Confident in presenting, discussing and championing ideas and concepts with senior stakeholders. • Experience of running information security risk governance processes and structures • Familiarity with relevant industry standards for information security (e.g. ISO27001, NIST CSF) • Experience of creating, implementing and assessing against information security policies and standards Creativity • Able to analyse complex, ambiguous problems and summarise clearly with a view to establishing practical solutions • Able to \"bridge the gap\" between technologists and business-people, bringing to life information security risks to the business, while maintaining a pragmatic outlook on likelihood and impact of the risk and cost/complexity of the mitigation. • Ensuring initiatives/programmes are anchored in best practice whilst still being highly practical/pragmatic. • Ability to defuse situations and resolve conflict to a win-win outcome • Influence others understand their views and agree ways of working that are acceptable to all parties. Business acumen to understand business risks and the information security implications • Able to identify when information security risks need to be escalated to achieve the right level of management visibility. • Able to prioritise security risks and controls, differentiating the essential from the \"nice to have\". • Able to judge how to communicate messages to people to maximise buy-in and/or understanding. • Able to analyse data with rigour & reach sound conclusions • Can assess when further data gathering, or analysis will bring diminishing returns. Can place appropriate weight on prevailing (sometimes conflicting) evidence. • Support and manage budget Responsibility • Responsibility of information security incident management • Responsibility for security assessments and assurance activities (e.g. penetration testing) and when to use them. • Oversee and management of security compliance management and reporting in relation to any relevant regulatory or legal requirements Operational responsibility of management of third parties Responsibility for managing change management around project and change leadership. Able to judge the political and other people aspects of a situation, and tailor messages and approach to bring people along. • Able to work with others, setting challenging but realistic targets for team members, and through coaching and appropriate guidance, securing a successful outcome. • A positive collegiate approach to developing relationships and networks at all levels across the Company and the gravitas to work persuasively with senior stakeholders. Is aware of different styles of stakeholders and can adjust own leadership style successfully to bridge any gaps. The Client and the role is based in Central London ??????\" and you will be required to be in the office at least 3 days week. The salary for this position will be £75K + £85K plus Benefits. Please do send your CV to us in Word format for this exciting new position along with your salary and availability.

About the role At Moorepay , we build Payroll and HR software that simplifies compliance, supports great people management, and ensures employees are paid accurately and on time, every time. But we don't just build for others; we live by the same principles internally. That means competitive pay, a culture of respect, and tools that help our own people thrive. We're proud to deliver award-winning software and an employee experience that reflects the quality of our solutions. Role Overview As Head of Quality Assurance , you won't just build software; you'll shape the experience of digital Payroll and HR products that thousands of UK businesses depend on. Working with the Font end JavaScript frameworks, Microsoft .NET suite and Azure, you'll lead teams assure quality throughout of application suit that bring real-world impact to customers and their employees. We also believe in taking care of our own people; offering flexibility, a great working environment, and a culture that values what HR and Payroll should deliver: consistency, respect, and fairness. We are looking for a hands-on, forward-thinking Head of Quality Assurance to lead and evolve our QA function in a dynamic, cloud-first environment. As a key member of the Engineering leadership team, you will be responsible for driving high-quality standards across all phases of development, from initial requirements through to release, with a strong emphasis on test automation, modern tooling, and AI-assisted development workflows . This role is ideal for a passionate QA leader who thrives in a collaborative environment, is comfortable getting into the code, and knows how to scale quality operations across both onshore and offshore teams . Work full time on a hybrid basis with 1 or 2 days per week in our Swinton - Manchester office. We're looking for a driven self-starter who wants to lead a team as well as still get their hands dirty on a daily basis. Skills & experience Define and execute the overall Quality Assurance strategy aligned with business and engineering goals. Lead and manage a distributed team of QA engineers and testers across multiple time zones. Actively contribute to hands-on test automation, framework design, and troubleshooting where needed. Drive adoption of Behaviour-Driven Development (BDD) using Cucumber, Gherkin, and related tools. Champion Agile QA practices, working closely with Product Owners, Scrum Masters, and Developers in a Scrum-based Agile environment. Manage and optimize test planning, execution, and traceability using Azure DevOps Test Plans. Integrate automated tests into CI/CD pipelines, ensuring rapid feedback and deployment readiness. Set and monitor key QA metrics and KPIs to ensure high-quality product releases. Lead risk-based testing strategies and support regulatory, security, and compliance requirements. Foster a collaborative QA culture that encourages innovation, ownership, and continuous improvement. Essential Skills & Experience 7+ years of QA experience, including 3+ years in a QA leadership or Head of QA role. Excellent communication, leadership, and stakeholder engagement skills. Strong expertise in Azure DevOps Test Plans and test lifecycle management. Hands-on experience with automated testing frameworks, such as: Selenium Playwright Cypress RestAssured Advanced knowledge of BDD concepts and tools: Cucumber Gherkin (Given/When/Then syntax) SpecFlow / Behave (a plus) Strong understanding of Agile Scrum methodology, with experience in sprint rituals and cross-functional collaboration. Experience leading remote QA teams and working effectively across distributed teams. A self-starter with strong initiative and the willingness to roll up their sleeves and get involved in test design, execution, and automation when required. Bonus Skills Experience in the HR, Payroll, or workforce management software domain. Familiarity with performance testing tools (e.g., JMeter, Gatling). Experience with security, audit, or compliance testing (e.g., SOC 2, GDPR). ISTQB or similar QA certification. Benefits & culture Part of the Zellis Group, Moorepay is a team of over 500 friendly professionals across four offices in Swinton (Manchester), Sheffield, Birmingham and Kochi (India). We're passionate about making Moorepay a fantastic place to work for every single one of our colleagues. The average length of service at Moorepay is 12 years, which speaks for itself! To help make Moorepay such a great place to work, we focus on three things in our company culture: mental health support, maintaining a healthy work/life balance, and equal opportunities and inclusion for all. Here's what you'll gain if you join our team: A career packed with opportunity, in a stable and growing company. A comprehensive programme of learning and development. Competitive base salary. 25 days annual leave, with the opportunity to buy more. Youll even get your birthday off as well! Private medical insurance. Life assurance 4x salary. Enhanced pension with up to 8.5% employer contributions. A huge range of additional flexible benefits across financial & personal wellbeing, lifestyle & leisure.

IT Security Manager Our Client is a large international organisation who are looking to recruit an IT Security Manager with at least 5 to 8 years proven expertise. Provide advice, support and guidance to all Company Corporate functions to assist them to maintain and improve their information security maturity. To work collaboratively with all areas of the Company Corporate and build networks and relationships to promote Information Security. • Act as subject matter expert on for IT Security, including legal and regulatory compliance • Advise Company Corporate functions on how to achieve the required controls and assist with solutions to support them. Eg Support in the development of standards and their application in line with Group security policies. • Participate in Company BU’s Projects giving support, guidance, control validation and overall security assurance. This could also involve sitting on major project steering committees. • Support and encourage the ethos and methodology of security by design. • Aid GRC to build, implement and facilitate a mechanism to aid BU’s to assess and measure their security compliance to policies. • Drive the development of BU/Divisional security roadmaps. Giving oversight of key non-conformities to feed into the CISO roadmap. • Coach, train and educate the Company IT and Functions to up skill and increase the security maturity in BU’s. Be an active member of the Company’s IS Security community, contributing to and leveraging the experience and lessons learned from other BU’s • Produce, implement and standardise protocol and guidance material to support Business unit activities �\" examples �\" Asset register templates, third party due-diligence. • Facilitate and chair the security working group meetings • Engage and manage third party relationships to support the Company and its affiliates • Aid Procurement and the tendering process • Raising the security baseline controls and standardising where it makes sense to do so. • Understanding the different business requirements and aligning to their objectives Support Security operations to continuously improve information security awareness across the group, including phishing campaigns and associated reporting Experience • Experience in an information security risk leadership role within a large organisation. • Confident in presenting, discussing and championing ideas and concepts with senior stakeholders. • Experience of running information security risk governance processes and structures • Familiarity with relevant industry standards for information security (e.g. ISO27001, NIST CSF) • Experience of creating, implementing and assessing against information security policies and standards Creativity • Able to analyse complex, ambiguous problems and summarise clearly with a view to establishing practical solutions • Able to \"bridge the gap\" between technologists and business-people, bringing to life information security risks to the business, while maintaining a pragmatic outlook on likelihood and impact of the risk and cost/complexity of the mitigation. • Ensuring initiatives/programmes are anchored in best practice whilst still being highly practical/pragmatic. • Ability to defuse situations and resolve conflict to a win-win outcome • Influence others understand their views and agree ways of working that are acceptable to all parties. Business acumen to understand business risks and the information security implications • Able to identify when information security risks need to be escalated to achieve the right level of management visibility. • Able to prioritise security risks and controls, differentiating the essential from the \"nice to have\". • Able to judge how to communicate messages to people to maximise buy-in and/or understanding. • Able to analyse data with rigour & reach sound conclusions • Can assess when further data gathering, or analysis will bring diminishing returns. Can place appropriate weight on prevailing (sometimes conflicting) evidence. • Support and manage budget Responsibility • Responsibility of information security incident management • Responsibility for security assessments and assurance activities (e.g. penetration testing) and when to use them. • Oversee and management of security compliance management and reporting in relation to any relevant regulatory or legal requirements Operational responsibility of management of third parties Responsibility for managing change management around project and change leadership. Able to judge the political and other people aspects of a situation, and tailor messages and approach to bring people along. • Able to work with others, setting challenging but realistic targets for team members, and through coaching and appropriate guidance, securing a successful outcome. • A positive collegiate approach to developing relationships and networks at all levels across the Company and the gravitas to work persuasively with senior stakeholders. Is aware of different styles of stakeholders and can adjust own leadership style successfully to bridge any gaps. The Client and the role is based in Central London ??????\" and you will be required to be in the office at least 3 days week. The salary for this position will be £75K + £85K plus Benefits. Please do send your CV to us in Word format for this exciting new position along with your salary and availability.

About the role Do you want to be at the forefront of cyber security, protecting people, data and systems from the evolving digital threat landscape? Are you looking to apply your technical expertise in a collaborative and forward-thinking environment? As a Technical Security Analyst, you'll be part of our Security team who are responsible for keeping our technology, processes and people safe. You'll apply an understanding of cyber security to protect the organisation, systems, information, personal data and people from attacks and unauthorised access. Particular focus will be applied to Security Assessment, analysis, and giving advice on risk mitigations to a broad range of colleagues, internally and externally, including suppliers and customers. As a Technical Security Analyst you'll be a hands on technical security resource, configuring, monitoring and assessing security tooling and alerts. You'll provide operational support to technical teams responsible for configuring and operating secure systems to prevent security breaches and monitoring systems to detect and respond to security breaches. Your key responsibilities will include: Supporting Security partners delivering our Managed Security Operations Centre Services. Providing technical input to Security engagements with internal and external customers. Assisting in ongoing investigations, with forensic and response activities, information Security Incidents, events, and issues in accordance with relevant procedures and standards. Identifying cyber threats and vulnerabilities, ensuring that findings are managed appropriately and remediated according to agreed timescales. Assisting in the creation, testing, and implementation of response and recovery plans in support of incident management threat modelling. Researching and investigating attack techniques and recommending ways to defend against them. Supporting the Security function in all aspects of Security operations and management reporting. Performing technical assessments of new and existing processing systems, identifying potential weaknesses and recommending suitable protection measures. Participating in red teaming and simulation exercises (technical & non-technical), to better understand our cyber-attack and defence posture, rehearse responses, and evaluate readiness. Assisting with the creation and delivery of security awareness collateral, promoting an effective security culture. Providing subject matter expertise as required for key projects, functions, and services as required. Practicing continuous self-learning to keep up-to-date with industry trends and developments to enhance your relevant skills. Skills & experience Essential skills / behaviours: Youll have a broad understanding of the services that the organisation provides to its customer base and be able to map this to Cyber Security policies and standards. A very good working knowledge of the procedures and tools used within the security practice and wider security ecosystem. Youll develop an in-depth knowledge of the platforms, systems, services, and products that the organisation uses and the relationships between them. A good general understanding of information and cyber security theory and the way that technical tooling can reduce the threats and risks within an organisation. Critical competencies: Degree holder in relevant information security discipline or professional qualification, or the equivalent combination of professional qualification, training, and work experience. Minimum 1 year practical cyber-security experience. Excellent communicator with the ability to interface at the highest level and exhibit good verbal, written and presentation skills. Experience of working within key Cyber Security principles and standards (ISO 27001, NIST, Cyber Essentials, MITRE). [i] Experience working in a customer-facing role desirable. You should have experience in managing team driven workloads. Demonstrable experience driving continuous improvement initiatives. Benefits & culture At Zellis we create market-leading HR & Payroll products and services, to power exceptional employee experiences so that you and your people do better. Our multi-award-winning products pay over five million employees a year, with almost half (42%) of the FTSE 100, 50% of the top retailers and 30% of the top universities in the UK & Ireland as customers, making us the largest provider of Payroll and HR software and managed services. Our vision is to be the clear leader in pay, reward, analytics, and people experiences. We're passionate about creating an environment where people want to join, belong to, and be part of a progressive organisation. Our values, which were defined with input from all of our 2,000 colleagues, we live and breathe every day: Unstoppable together. Always learning. Make it count. Think scale. Our people are critical to our ongoing success; we're proud of our inclusive culture that gives you the platform to grow, challenge the status quo and play a crucial role in further enhancing our market position as the leading provider of HR & Payroll software and services. With Zellis you'll have the chance to stretch and challenge yourself in an environment that's varied, flexible and hugely supportive. We also love to reward and recognise our brilliant colleagues. As part of your benefits package, you'll receive: A competitive base salary. 25 days annual leave, plus your birthday off and the opportunity to buy additional holiday. Private medical insurance. Life assurance 4x salary. Enhanced pension scheme with company contributions up to 8.5%. A huge range of additional flexible benefits across financial & personal wellbeing, lifestyle & leisure.

Job Title: Senior Consultant - Product Assurance (Naval Architecture) Location: Barrow-in-Furness. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Competitive What you’ll be doing: · You will provide independent review of product design and assurance of compliance with Life Cycle Management, Engineering and product safety policies · Provide independent judgement regarding the safety of the design of Submarines’ products in the context of meeting business, contract, programme, regulatory and statutory requirements · The provision of independent judgement regarding the establishment, maintenance and robustness of all Engineering & Product Integrity Assurance processes being executed by those responsible managers delegated by the EA · You will establish the assurance requirements for programmes/projects and upholding these through the product lifecycle assuring that product integrity requirements are satisfied · You will provide independent assurance of the certification & qualification of products as required through the product’s lifecycle, aligned with the requirements of the Submarines Product Assurance Framework · The provision of independent assurance that Design Reviews and Technical Bid Reviews are conducted to provide independent appraisal · And you will provide independent assurance that work is completed in accordance with all mandated Engineering policies and processes Your skills and experiences: · Experience of submarine Naval Architecture; Structures; Containment; Outfit; Anchoring, Mooring, Berthing, Towing, Salvage and Docking; and Submarine Escape, Rescue, Abandonment & Survival (SMERAS) · A depth of understanding of how Submarine engineering is organised and structured and how different engineering disciplines are integrated · Good understanding of submarine customer(s) and their requirements plus an awareness of industry approaches and standards · Awareness or Exposure to System Design Principles · Stakeholder management experience · Sound technical hands-on engineering knowledge Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Engineering Product Assurance Department: Engineering Product Assurance Department (EPAD). The role is one of six senior consultants with a various specialist skillsets supported by an Engineering manager and a team of six Principal Engineers (of a solid submarine industry and ex submariner backgrounds). Sitting outside of the programmes engineering management, EPAD provides an independent risk-based assessment on the effectiveness of governance, engineering management, and internal controls across Level 1 & 2 assurance activities. The Level 3 output also provides an independent view to the Engineering Authority (EA) and senior programme stakeholders on product/design maturity and identifies areas where intervention or improvement may be required. When appropriate the Level 3 activity should also draw upon pan-functional mutual assurance in accordance with Independent Internal Assurance. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 16th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-AB1 #LI-Hybrid

Job Title: Principal Engineer - Product Assurance Location: Barrow-in-Furness. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Competitive What you’ll be doing: You will provide engineering assurance across products within BAE Systems Maritime-Submarines for applicable Submarine Enterprise programmes Provide support to plan assurance activities pertaining to applicable Product, cognisant of the resource limitations by utilising a risk-based approach as defined in local engineering documentation You will support the assigned assurance activities, providing SQEP knowledge to deliver the assurance requirement You will provide assurance that engineering products are integrated, safe, fully compliant with the agreed requirements set. All hazards are demonstrated ALARP, and is cost effective and are clearly defined, configured and controlled for applicable product Provide assurance that design reviews and technical bid reviews are conducted to provide independent appraisal in-accordance-with controlling framework for the management and conduct of design reviews and technical bid reviews You will provide assurance that work is completed in accordance with all mandated Engineering policies and processes Work with others both inside and out with Engineering to deliver the best outcome for applicable Product Provide technical support to the wider Submarine enterprise Provision of Independent Safety Assurance of the Submarine products within the scope of supply. A key aspect of this role is to take a diverse view, independent from the designers, manufactures, and users of products Your skills and experiences: Experience in a formal Engineering discipline Quality/Test and Commissioning/Submarine operations ideally with relevant STEM degree Working knowledge of Life Cycle Management for the development of Engineering systems Working knowledge of investigations required for root cause analysis and the rectification of events Experience of design reviews, audits, change management, verification, validation and commissioning Ability to communicate effectively using oral and written briefings and technical reports, articulate and present complex technical argument and evidence clearly, logically and simply Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Engineering Product Assurance Department (EPAD): The Engineering Product Assurance Department work within the submarines business unit, providing assurance on build programmes, site projects and infrastructure. As the Principal Engineer - Product Assurance you will be a focal point for product assurance matters within the Engineering Product Assurance Department (EPAD). The Principal Engineer will be able to apply their deep level of subject matter expertise and experience to ensure that submarine systems and products are delivered and can be managed and supported through-life. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 15th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-AB1 #LI-Hybrid

This is an exciting opportunity in the Digital Services team! You'll be joining our team at a time of transformation, and you will be part of shaping the future of our department. We use Agile Methodologies and promote a culture of continuous improvement. We are looking for an enthusiastic Lead Test Engineer (Security) with great technical skills able to coach and mentor other testers and lead the non-functional testing workstream focused on Security testing. You will be part of our lead tester group, working collaboratively with your team and overseeing the testing journey with management responsibilities. This provides an opportunity to make the test community thrive by exploring new and emerging tools and approaches and working out how you can help the organisation deliver better services. This is a rewarding role within the Test Team and provides an opportunity to contribute to the success of existing and future services provided by Companies House. Companies House offers a flexible and welcoming culture that promotes a healthy work life balance as well as a proactive approach to wellbeing that allows us to be our best at work. We recognise that people are the key to our success so offer a fantastic benefits package including flexible working with no core hours, 30 days annual leave, 8 bank holidays and 1 privilege day as well as enrolment into the Civil Service Pension scheme with a contribution rate averaging 28%. We're able to consider both full-time and part-time working patterns for this opportunity. For part-time, this must be a minimum of 30 hours per week, over 4 or 5 days. Please note - Companies House cannot offer Visa sponsorship to candidates through this campaign. Additionally, a Security Check (SC) is an essential requirement for this role (at least 3 out of the last 5 years in the UK). Please see 'Things you need to know' section below for more information. Job description As a Lead Test Engineer focusing on security, you will: Take ownership of security testing within the software development lifecycle. This will involve running vulnerability scans using tools such as Burp, coordinating with relevant teams, and testing security-related issues. As a manager, you will provide advice, coaching and mentoring to testers on non-functional testing subjects such as security testing. Attend meetings and provide stakeholders with updates. Design and execute manual and automated security test cases using standard testing techniques. Design and implement pipeline solutions to support automated security testing and reporting. For more information on the Test Engineering profession and skills expected of a Lead, head over to the . Person specification We are looking for the following experience, which will be assessed at sift and at interview. Proven experience of coaching and mentoring direct reports. A relevant certification in ethical hacking or penetration testing, such as such as 7Safe CSTA or GIAC Penetration testing, or evidence that you are working towards this or have proven working experience. Experience of non-functional testing practices with a strong focus on Security Testing. Working knowledge of at least 5 of the following security tools and technologies: Burp Suite (including Burp Scanner) - for web application vulnerability scanning and manual security testing. OWASP ZAP - for DAST and automated security regression testing. Postman or SOAP UI - for API testing with a security focus (e.g. injection, authorisation, token misuse). OAuth2 / OpenID Connect - for testing secure authentication and access control scenarios. Jenkins or Concourse - for integrating security testing into CI/CD pipelines. Unix/Linux-based systems - for using command-line tools, scripting, and log analysis. AWS (or similar cloud provider) - with a focus on IAM, S3 access controls, and common misconfiguration risks. SQL / MongoDB / Oracle - for testing injection flaws, access controls, and data sanitisation. Karate DSL or Rest Assured - for automating security-focused API tests. Version control systems (e.g. Git) - for secure code handling and integration with secrets scanners. Static Application Security Testing (SAST) tools - e.g. SonarQube, Checkmarx, Semgrep. Dynamic Application Security Testing (DAST) tools - e.g. OWASP ZAP, Burp Suite Pro. Infrastructure-as-Code (IaC) scanning tools - e.g. tfsec, Checkov. Secrets detection tools - e.g. GitLeaks, truffleHog, detect-secrets. Threat modelling methodologies - e.g. STRIDE, PASTA, or creating risk-based test charters. Familiarity with the OWASP Top 10 - and how to test for each category. Benefits Alongside your salary of £41,571, Companies House contributes £12,043 towards you being a member of the Civil Service Defined Benefit Pension scheme. We offer an excellent benefits package that includes: a generous 30 days annual leave plus 8 bank holidays and 1 privilege day enrolment into the Civil Service Pension Scheme with a contribution rate of averaging 28% a range of recognition schemes including instant awards to thank and recognise each others efforts and contributions strong ethos of equality, diversity and inclusion great work life balance with flexible and mobile working available for many roles a pro-active approach to employee wellbeing that allows our employees to flourish and be their best at work and has enabled us to become an Investors In People platinum accredited employer online financial support and advice seasonal flu jabs generous maternity, paternity, adoption and shared parental leave allowances a focus on career development and progression a number of inclusive network groups to support our colleagues and a great sports and social society cycle to work scheme staff discount scheme holiday play scheme for children 3 days paid volunteering leave Next Steps Click 'Apply Now' to be taken to our main advert Civil Service Jobs where you can see more details regarding the role, the incredible benefits we have to offer and what it's like to work in Companies House. If you have any questions about the role or process, please reach out to . This role closes on 20 July 2025.

This is an exciting opportunity in the Digital Services team! You'll be joining our team at a time of transformation, and you will be part of shaping the future of our department. We use Agile Methodologies and promote a culture of continuous improvement. We are looking for an enthusiastic Senior Test Engineer (Non-Functional Security) with great technical skills, able to deliver and support security testing workstreams, including vulnerability assessments and penetration testing. You will also offer guidance to other testers on security testing best practices. You will be part of our non-functional testing specialist team, working collaboratively with your team and overseeing the testing journey. This provides an opportunity to make the test community thrive by exploring new and emerging tools and approaches and working out how you can help the organisation deliver better services. This is a rewarding role within the Test Team and provides an opportunity to contribute to the success of existing and future services provided by Companies House. Companies House offers a flexible and welcoming culture that promotes a healthy work life balance as well as a proactive approach to wellbeing that allows us to be our best at work. We recognise that people are the key to our success so offer a fantastic benefits package including flexible working with no core hours, 30 days annual leave, 8 bank holidays and 1 privilege day as well as enrolment into the Civil Service Pension scheme with a contribution rate averaging 28%. We're able to consider both full-time and part-time working patterns for this opportunity. For part-time, this must be a minimum of 30 hours per week, over 4 or 5 days. Please note - Companies House cannot offer Visa sponsorship to candidates through this campaign. Additionally, a Security Check (SC) is an essential requirement for this role (at least 3 out of the last 5 years in the UK). Please see 'Things you need to know' section below for more information. Job description As a Senior Test Engineer focusing on security you will; Working within a delivery team, youll contribute to the coordination and execution of security testing across the software development lifecycle. This will involve running vulnerability scans using tools such as Burp, coordinating with relevant teams, testing security related issues. Support the wider test team by sharing knowledge and guidance on security testing approaches and tooling. Attend meetings and provide stakeholders with updates. Design and implement pipeline solutions to support automated security testing and reporting. For more information on the Test Engineering profession and skills expected of a Lead, head over to the . Person specification We are looking for the following, which will be assessed at sift, technical stage and interview. Experience in Security testing. A relevant certification in ethical hacking or penetration testing, such as such as 7Safe CSTA or GIAC Penetration testing, OR currently working towards this OR have proven working experience. Working knowledge of at least 5 of the following security tools and technologies: Burp Suite (including Burp Scanner) - for web app vulnerability scanning and manual security testing. OWASP ZAP - for DAST and automated security regression testing. Postman or SOAP UI - for API testing with a security focus (e.g. injection, authorisation, token misuse). OAuth2 / OpenID Connect - for testing secure authentication and access control scenarios. Jenkins or Concourse - for integrating security testing into CI/CD pipelines. Unix/Linux-based systems - for using command-line tools, analysing logs, and running manual tests. AWS (or similar cloud provider) - with a focus on IAM, S3 access, and common misconfiguration risks. SQL / MongoDB / Oracle - for testing injection flaws, access controls, and data sanitisation. Karate DSL or Rest Assured - for automating security-focused API tests. Git or other version control systems - for secure code handling and integration with security scanners. Static Application Security Testing (SAST) tools - e.g. SonarQube, Checkmarx, Semgrep. Dynamic Application Security Testing (DAST) tools - e.g. OWASP ZAP, Burp Suite Pro. Infrastructure-as-Code (IaC) scanning tools - e.g. tfsec, Checkov. Secrets detection tools - e.g. GitLeaks, truffleHog, detect-secrets. Threat modelling approaches - e.g. STRIDE, or creating risk-based test charters. Familiarity with the OWASP Top 10 - and how to test for each risk category. Benefits Alongside your salary of £40,398, Companies House contributes £11,703 towards you being a member of the Civil Service Defined Benefit Pension scheme. We offer an excellent benefits package that includes: a generous 30 days annual leave plus 8 bank holidays and 1 privilege day enrolment into the Civil Service Pension Scheme with a contribution rate of averaging 28% a range of recognition schemes including instant awards to thank and recognise each others efforts and contributions strong ethos of equality, diversity and inclusion great work life balance with flexible and mobile working available for many roles a pro-active approach to employee wellbeing that allows our employees to flourish and be their best at work and has enabled us to become an Investors In People platinum accredited employer online financial support and advice seasonal flu jabs generous maternity, paternity, adoption and shared parental leave allowances a focus on career development and progression a number of inclusive network groups to support our colleagues and a great sports and social society cycle to work scheme staff discount scheme holiday play scheme for children 3 days paid volunteering leave Next Steps Click 'Apply Now' to be taken to our main advert Civil Service Jobs where you can see more details regarding the role, the incredible benefits we have to offer and what it's like to work in Companies House. If you have any questions about the role or process, please reach out to . This role closes on 20 July 2025.

Location The ONS operates a flexible hybrid working model across the UK, with colleagues linked to one of our contractual locations working between office and remote throughout the week. The locations for this role are Newport, Titchfield (Fareham) and Manchester. All colleagues on office-based contracts should be working primarily in their contractually allocated site for at least 40% of their working time. The exception to this is for colleagues based at the Manchester office. Due to current capacity constraints, colleagues based there will only be required to attend the office for 20% of their work time. It is expected Manchester will move to 40% in 2025-2026. The induction process for the role will be conducted in person. About the job Job summary The Office for National Statistics (ONS) is the UK's largest producer of official statistics, covering a range of key economic, social and demographic topics. These include measuring changes in the value of the UK economy, estimating the size, geographic distribution, and characteristics of the population, and providing indicators of price inflation, employment, earnings, crime, and migration. The role is within the Security Development Compliance and Audit (SDCA) team which forms part of the Security and Information Management (SaIM) directorate. The SDCA team provides an advice service to stakeholders for the complete lifecycle, security and governance of sensitive information stored within data access environments. The SDCA team also acts as an interface between stakeholders to deliver data protection assurance, monitor compliance with security policies and principles as well as provide evidence to stakeholders in support of these functions. The primary focus of the role will be leading the Security Development and Compliance team in the development and implementation of data protection assurance and audit capabilities, in line with clearly defined security strategy and data protection standards. This also includes advising internal users, stakeholders and Information Asset Owners on compliance and risk associated with use of data. The role includes line management responsibilities for Security Development and Compliance Policy Associates HEO & EO Level. Job description The Role The role supports ONS core security capability, covering service management, assurance and incident response, and provides many opportunities for cross-skilling and development. The focus, outcomes and responsibilities are primarily aligned to the Government Security Profession Cyber Security Monitoring Lead role, with elements from Corporate Enablers Security Adviser and Process Lead roles. Responsibilities: Developing, owning and implementing effective data protection assurance processes and compliance documentation (e.g. DPIAs, SyOPs, etc.) to meet regulatory and legal requirements. Developing and implementing effective security auditing, monitoring and assessment capability for data systems and data use incorporating advice from security and industry best practice. Establishing detailed understanding of the nature, scope, context, purposes and risk of data processing by different business areas to provide comprehensive guidance and effective oversight of compliance. Developing and promoting effective training, engagement and awareness-raising activities to promote data protection and compliance best practice. Investigating non-compliance incidents and breaches in conjunction with Cyber Security and directing mitigating actions. Supporting the shaping of the security audit and monitoring strategy, ensuring requirements, policies and standards to govern all activities and outputs are met. Supporting Cyber Security in the management of monitoring, triaging, and investigation of security alerts on protective monitoring platforms to identify security incidents and reviewing analysis of security event data to manage security incident response, reporting, or escalation where appropriate. Person specification Essential Criteria: Detailed knowledge of data protection legislation and regulations, including understanding of their implementation in different contexts across Government. Ability to assess risk of diverse data use cases across multiple business areas advise on mitigations. Ability to understand and evaluate threat based on quantitative and qualitative data and recommend protective security measures. Ability to effectively manage a team of specialists based across different sites within a dynamic working environment. Understanding of UK Government Security Policy Framework and relevant Information Assurance Standards, e.g. ISO 27001, Data Protection Act. Ability to work as part of a team in a multi-discipline environment. HMG Vetting at Security Clearance (SC) level will be required prior to starting in role. Desirable Criteria: Holding or willing to work towards professional development qualifications within specialist Security discipline g.ISO 27001 Security Auditor etc. Behaviours We'll assess you against these behaviours during the selection process: Communicating and Influencing Managing a Quality Service Leadership Working Together Technical skills We'll assess you against these technical skills during the selection process: Applied Security Capability - Practitioner Information Risk Assessment and Risk Management - Practitioner Protective Security - Working Threat Understanding - Working

Job title: Principal Assurance and Governance Engineer Location: Barrow in Furness- On Site Salary: £45,628-£57,500 Dependent of skills and experience What you’ll be doing: Identifying and managing emerging or existing compliance risks related to Engineering and Quality standards, while supporting the development of new facilities and capabilities Assisting in the creation and management of a risk-based audit schedule, as well as supporting inspections and recertification processes to ensure clear visibility of outcomes across the program Supporting the management, maintenance, and continuous improvement of the T&FC Operational Framework and Code of Practice Continuously reviewing T&FC’s governance structures and arrangements to ensure they promote appropriate levels of responsibility, accountability, efficiency, and effectiveness Your skills and experiences: Essential Educated to degree level in a STEM related subject Proven experience of managing engineering and quality governance activities within a complex software environment Knowledge of ISO 9001, ISO 45001 Exposure to Engineering Management Plans/Business Management systems/Operational Frameworks Desirable Diverse Experience in heavy highly regulated industry Benefits: You’ll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You’ll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2work and employee discounts - you may also be eligible for an annual incentive. The Platform Systems Governance and Assurance team: This role offers a unique opportunity to take ownership and drive transparency, standardisation, and consistency, fostering a cultural transformation within the Submarines network and systems. You will play a crucial role in delivering strategic objectives. Here you’ll embrace leadership responsibilities, assisting in monitoring key performance indicators (KPIs) to evaluate process performance and efficiency. This is an exceptional chance to gain firsthand insight into complex operational systems and engage with cutting-edge engineering design. You’ll join a dynamic team responsible for managing governance and assurance activities on behalf of the Test & Facilities Capability (T&FC). You will play a key role in developing and maintaining processes that support the entire engineering lifecycle. Currently, the team is working on the high-profile Dreadnaught Programme, offering a unique opportunity to contribute to a critical national project. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 9th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-Onsite #LI-LE1

Job Title: Senior Engineer - Product Assurance & Governance Location: Coventry. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Competitive What you’ll be doing: Provide specialist knowledge and subject matter expertise in the development of engineering Processes. Identify the need for, develop, communicate, and maintain processes supporting the entire engineering lifecycle Understand and articulate the impact of their processes on other areas of the functional and wider business. Along with understanding and articulating the role of Governance within and beyond Engineering Conduct independent Assurance activities to ensure design proving evidence is comprehensive, captured within the correct tools and documentation and has been endorsed by the appropriate level of authority Support the development of estimates for the scope of work and resources required to deliver it in order to support bids, proposal development and project planning activities from a Process, Governance and Assurance perspective Support the documentation of domain knowledge of Process, Governance and Assurance and be able to pass on information and expertise in order to help grow the knowledge base within appropriate business teams Provide technical guidance to other engineers and support the engineering management team in planning and controlling specialist activities that relate to Process, Governance & Assurance Your skills and experiences: Bachelor’s degree or equivalent qualification in a STEM-related field Extensive experience and expertise in Process, Governance, and Assurance practices, preferably within the defence sector Familiarity with the engineering lifecycle, including direct experience in one or more phases in a Systems Engineering role, as well as an understanding of the broader engineering process A strong technical understanding of how your work in the Process, Governance and Assurance role contributes to the overall product, platform, or programme Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Platform Complex Systems (PCS) team: The PCS team is tasked with defining, implementing and managing original ways of working within a multi-disciplined environment to deliver complex, software-intensive systems for the BAE Systems Submarines, Dreadnought Programme. Your role will be to undertake Process, Governance and Assurance (PG&A) initiatives to enable the effective and efficient delivery of the engineering products for PCS throughout the engineering lifecycle. BAE Systems Submarines is experiencing a period of significant growth and we are now actively recruiting a variety of roles and specialisms to support our ongoing submarines programs which is critical to delivering our national endeavour. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 10th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-SC1 #LI-Hybrid

Job Title: Independent Nuclear Assurance (Senior Inspector) Location: Barrow-in-Furness. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role Salary: Competitive What you’ll be doing: Maintaining the delivery of independent inspection, surveillance and concurrence of nuclear work on facilities, plant, equipment and nuclear support services, on-board and on-site Evaluating the nuclear and radiological safety and security performance against the requirements of relevant legislation to assess the business’ level of compliance Supervised inspection and assessment to progress the submarine build and projects in the Site Redevelopment Programme to next stage through the ‘Hold Point Control’ process Communicating the conclusions of inspections and their findings to various stakeholders at all levels, including external regulators, board members, senior managers and business peers Supporting the independent assessment of the business’ emergency arrangements exercises and providing feedback to those developing and maintaining the arrangements Providing oversight and challenge to various safety and security committees and groups to ensure due process is being followed, and continuing nuclear safety is not compromised Developing and maintaining individual Assurance Plans aligned with key business projects and programmes Maintaining oversight of Independent Peer Review of safety documentation Your skills and experiences: Essential: Experience or knowledge working in a Nuclear or Highly Regulated Environment or within a Quality or Safety related role Ability to evaluate and confront challenges within the team and provide influential solutions Self-motivated, organised and a methodical approach to work Excellent communication and interpersonal skills Desirable: Experience in auditing inspections Knowledge of nuclear site licence conditions/authorisation conditions from a similar role and/or security regulations Experience in Submarine build, testing and commissioning Degree or equivalent in STEM subject Benefits: You’ll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You’ll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2work and employee discounts - you may also be eligible for an annual incentive. Our Independent Nuclear Assurance Team: As an Independent Nuclear Assurance Inspector, you will be working as part of a group of regulatory inspectors reporting to the Senior Engineering Manager (Independent Nuclear Assurance). The Independent Nuclear Assurance team acts as the internal regulator for the Submarines business, forming an evidence-based independent view of the business’ nuclear and radiological safety and security performance. Through delivery of a comprehensive inspection programme, the team develops the evidence to support its findings and conclusions and has the opportunity to influence change at every level of the business including, the safety of our boat delivery programmes. The team form part of the Nuclear Safety and Regulation Department within the Nuclear Safety and Security Directorate. One of the main attractions of this role is the opportunity to work with all areas of the business. With the diversity of this role, you can be one day carrying out an on-board boat or facility inspection and the next interviewing a director in relation to a specific business requirement. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 11th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-GM4 #LI-Onsite

Job Title: Senior Cyber Security Specialist Location: Barrow-In-Furness. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa £60,000 dependent on experience What you’ll be doing: Cyber Security risk assessment of systems and services Support the definition and design of secure solutions that meet business needs Assess Architectural designs and identify proportionate Cyber Security controls aligned with business objectives Assessment of systems, services and Cyber Security controls, to provide an independent analysis of compliance with BAE Systems Security Policy, standards and external regulatory requirements. Lead Assessment of Cyber Security controls to ascertain effectiveness in reducing risk, including any vulnerability components Analysis, creation and compilation of relevant documentation determining the compliance level of systems and services, technical security controls with applicable certification, accreditation, and internal policy requirements Manage the delivery of penetration tests and vulnerability analysis in support of risk mitigation strategies Support stakeholders in resolving Cyber Security issues and act as a subject matter expert regarding assurance activities for the wider organisation Your skills and experiences: Essential: Good knowledge of industry standard security policy, standards and good practice guidance and their application to a variety of IT solutions processing protectively marked information In-depth knowledge of threats, risks, vulnerabilities and risk mitigations strategies and techniques Knowledge of information security standards, such as HMG, ISO 27001/18, NIST 800 etc Wide ranging knowledge of application, infrastructure and security technologies and in-depth knowledge of implementing them in a secure configuration within On-premise, hybrid & Cloud environments Experience of working in a project environment and risk management and the application of risk management methodologies Desirable: CISSP/CISM/CCSP/CCSK and/or CCP Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Cyber Security Assurance team: The Cyber Security Assurance Team with Shared Services are part of Enterprise IT (EIT) with responsibility for assuring all enterprise managed systems and services, spanning UK/RoW. The team ensure systems / services are built and configured in-line with applicable Cyber Security Standards. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 8th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-SH1 #LI-Hybrid

Job Title: Principal Engineer - Product Assurance & Governance Location: Manchester. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Competitive What you’ll be doing: Provide specialist knowledge and subject matter expertise in the development of engineering Processes. Identify the need for, develop, communicate, and maintain processes supporting the entire engineering lifecycle Understand and articulate the impact of their processes on other areas of the functional and wider business. Along with understanding and articulating the role of Governance within and beyond Engineering Conduct independent Assurance activities to ensure design proving evidence is comprehensive, captured within the correct tools and documentation and has been endorsed by the appropriate level of authority Support the development of estimates for the scope of work and resources required to deliver it in order to support bids, proposal development and project planning activities from a Process, Governance and Assurance perspective Support the documentation of domain knowledge of Process, Governance and Assurance and be able to pass on information and expertise in order to help grow the knowledge base within appropriate business teams Provide technical guidance to other engineers and support the engineering management team in planning and controlling specialist activities that relate to Process, Governance & Assurance Your skills and experiences: Bachelor’s degree or equivalent qualification in a STEM-related field Extensive experience and expertise in Process, Governance, and Assurance practices Familiarity with the engineering lifecycle, including direct experience in one or more phases in a Systems Engineering role, as well as an understanding of the broader engineering process A strong technical understanding of how your work in the Process, Governance and Assurance role contributes to the overall product, platform, or programme Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Platform Complex Systems (PCS) team: The PCS team is tasked with defining, implementing and managing original ways of working within a multi-disciplined environment to deliver complex, software-intensive systems for the BAE Systems Submarines, Dreadnought Programme. Your role will be to undertake Process, Governance and Assurance (PG&A) initiatives to enable the effective and efficient delivery of the engineering products for PCS throughout the engineering lifecycle. BAE Systems Submarines is experiencing a period of significant growth and we are now actively recruiting a variety of roles and specialisms to support our ongoing submarines programs which is critical to delivering our national endeavour. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 8th July 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-SC1 #LI-Hybrid