Navy Command - Project Cybersecurity Officer

Job summary

At Navy Command, we lead, support, and sustain the Royal Navy across every theatre of operations. We coordinate the people, platforms, and missions that keep the Fleet ready for today’s challenges and tomorrow’s opportunities. Together, we uphold centuries of naval tradition while driving innovation that ensures the Royal Navy’s readiness to protect our nation and secure our future.

As the authority for the Royal Navy’s nuclear submarine capability, the Submarine Directorate oversees one of the most complex and critical elements of UK defence. Covering everything from in‑service management to long‑term fleet modernisation, the directorate ensures the Submarine Flotilla remains safe, reliable, and ready to meet national security requirements.

You'll be based at HMNB Devonport, the largest naval base in Western Europe and a powerhouse of Royal Navy capability. It is home to amphibious ships, survey squadrons, submarines, and two-thirds of the frigate force. With its unique nuclear refitting facility, Devonport ensures the Fleet remains ready to support operations worldwide.

This position is advertised at 37 hours per week.

Job description

Are you ready to put your cyber skills to work where they really matter? We’re looking for a curious, confident and forward-thinking Project Cyber Security Officer to help protect critical systems, support exciting projects, and embed secure-by-design thinking across HM Naval Base Devonport. This is a fantastic opportunity to be at the heart of a busy and unique Defence environment, working with a wide range of stakeholders to spot risks, solve problems, and make sure security is built in from the very start.What you will do:

• Identify, assess, and manage cyber security risks associated with project systems, networks, data, and suppliers.
• Develop, maintain, and apply project cyber security risk management and incident response arrangements.
• Ensure compliance with relevant cyber security policies, standards, and regulatory requirements.
• Embed cyber security controls into system design, development, implementation, testing, and acceptance activities.
• Coordinate security testing and assurance activity, including vulnerability assessment, penetration testing, and remediation tracking.
• Protect project services and information from cyber threats, including unauthorised access, malicious activity, data loss, and system compromise.
• Provide timely cyber security advice to project teams, stakeholders, and leadership during planning, delivery, and transition phases.
• Support the development and maintenance of proportionate security plans, procedures, and assurance artefacts.
• Conduct audits, reviews, and inspections, and ensure that findings are addressed through agreed actions.
• Monitor the effectiveness of implemented controls and report risks, issues, and assurance outcomes to project and security leadership.
• Maintain accurate records of cyber security activities, incidents, decisions, and evidence to support governance and audit requirements.
• Promote alignment between cyber, physical, and business continuity arrangements across the project environment.

Person specification

To be successful with your application, you'll need to show that you meet the following essential criteria:

• Experience of working in a cyber security, information assurance, IT security, protective security, or technical risk management environment.
• A good understanding of cyber security principles, including secure-by-design, risk management, vulnerability management, and the protection of systems, networks and information.
• Ability to identify, assess and communicate cyber security risks clearly to stakeholders.
• Experience of working collaboratively with multiple stakeholders to support delivery of secure outcomes.
• Strong written and verbal communication skills, with the ability to produce clear advice, reports, records and assurance evidence.
• Ability to prioritise work, manage competing demands and deliver at pace in a busy operational or project environment.
• Awareness of relevant security policies, standards or frameworks.
• A proactive approach to problem solving, continuous improvement and promoting good cyber security behaviours.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Working Together
• Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

• Security Architecture - Practitioner

Benefits

Alongside your salary of £37,720, Ministry of Defence contributes £10,927 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• 25 days paid annual leave rising (1 day per year) to 30 days upon completion of 5 years’ service
• Market-leading employer pension contribution of 28.97%
• Personal & professional development
• Alternative working patterns for many roles
• Access to a confidential, professional support service
• Discount schemes
• Bicycle / season-ticket loans
• Enhanced maternity, paternity, and adoption leave
• Special paid leave to volunteer (up to 6 days a year)
• Government Digital and Data Pay Framework Eligible

In Navy Command we believe that everyone has the potential to make a difference and you’ll be supported through your learning journey and your career. This can include working towards membership of a professional body and/or undertaking an apprenticeship as part of your role.

You’ll have access to a variety of qualifications pathways ranging from GCSE/A-Level equivalent all the way up to master’s degree, depending on your role, your previous skills and your experience. Some qualifications even include “on-the-job” training which means minimal disruption to your working day but maximum impact

Where business needs allow, some roles may be suitable for a combination of office and working from home as part of a non-contractual hybrid working arrangement. All office-based employees will be expected to spend a minimum of 60% of their working time in office, subject to site capacity and any required workplace adjustments. Requirements to attend other locations for official business, or work in another MOD workplace, will also count towards this level of office attendance. Applicants can request further information regarding how this and other flexible working arrangements may work in their team from the Vacancy Holder (see advert for contact details). Defence Business Services cannot respond to any questions about working arrangements.

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.c