Navy Command - Project Cybersecurity Officer

At Navy Command, we lead, support, and sustain the Royal Navy across every theatre of operations. We coordinate the people, platforms, and missions that keep the Fleet ready for today’s challenges and tomorrow’s opportunities. Together, we uphold centuries of naval tradition while driving innovation that ensures the Royal Navy’s readiness to protect our nation and secure our future.

As the authority for the Royal Navy’s nuclear submarine capability, the Submarine Directorate oversees one of the most complex and critical elements of UK defence. Covering everything from in‑service management to long‑term fleet modernisation, the directorate ensures the Submarine Flotilla remains safe, reliable, and ready to meet national security requirements.

You'll be based at HMNB Devonport, the largest naval base in Western Europe and a powerhouse of Royal Navy capability. It is home to amphibious ships, survey squadrons, submarines, and two-thirds of the frigate force. With its unique nuclear refitting facility, Devonport ensures the Fleet remains ready to support operations worldwide.

This position is advertised at 37 hours per week.

Are you ready to put your cyber skills to work where they really matter? We’re looking for a curious, confident and forward-thinking Project Cyber Security Officer to help protect critical systems, support exciting projects, and embed secure-by-design thinking across HM Naval Base Devonport. This is a fantastic opportunity to be at the heart of a busy and unique Defence environment, working with a wide range of stakeholders to spot risks, solve problems, and make sure security is built in from the very start.

What you will do:

• Identify, assess, and manage cyber security risks associated with project systems, networks, data, and suppliers.
• Develop, maintain, and apply project cyber security risk management and incident response arrangements.
• Ensure compliance with relevant cyber security policies, standards, and regulatory requirements.
• Embed cyber security controls into system design, development, implementation, testing, and acceptance activities.
• Coordinate security testing and assurance activity, including vulnerability assessment, penetration testing, and remediation tracking.
• Protect project services and information from cyber threats, including unauthorised access, malicious activity, data loss, and system compromise.
• Provide timely cyber security advice to project teams, stakeholders, and leadership during planning, delivery, and transition phases.
• Support the development and maintenance of proportionate security plans, procedures, and assurance artefacts.
• Conduct audits, reviews, and inspections, and ensure that findings are addressed through agreed actions.
• Monitor the effectiveness of implemented controls and report risks, issues, and assurance outcomes to project and security leadership.
• Maintain accurate records of cyber security activities, incidents, decisions, and evidence to support governance and audit requirements.
• Promote alignment between cyber, physical, and business continuity arrangements across the project environment.

Open to UK nationals only.

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

As part of Defence Reform, Navy Command continues to review and evolve its Target Operating Model to support more agile ways of working. In this context, the role and responsibilities of this role may develop over time to reflect changing business priorities and opportunities.

At Sift, you will be assessed against the following;

• Candidates will be required to provide CV details to include job history and qualification details.
• Candidates will be required to provide a personal statement. This should be a maximum of 500 words that sets out your motivation for applying and shows how your skills and experience meet the essential requirements for the role.

At Interview, you will be assessed against the following success profiles:

Behaviour

• Making effective decisions
• Working together
• Communicating and Influencing

Technical

• Security Architecture - Practitioner

Government Security Profession career framework

Further information:

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

There may be occasions where it is not practicable or appropriate to interview all DCS candidates that meet the minimum criteria for the job. For example, in certain recruitment situations such as a high volume of applications, seasonal demand, or peak periods, the employer may wish to limit the overall number of interviews offered to both DCS and non-DCS applicants.

As a result of the changes to the UK immigration rules which came into effect on 1 January 2021, the Ministry of Defence will only offer sponsorship for a skilled worker visa under the points-based system, where a role has been deemed to be business critical. This role does not meet that category, and we will not sponsor a visa. It is therefore NOT open to applications from those who will require sponsorship under the points-based system.

Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.

The Ministry of Defence requires all candidates who are successful at interview to declare any outside interests. These declarations will be discussed with successful candidates following the interview process and before a formal offer of employment is made, as some outside interests may not be compatible with MOD civilian roles. This will not, in the majority of cases, prevent employment in MOD, but it is a measure that must be taken to ensure that appropriate mitigations can be put in place to manage any potential, perceived or actual conflicts of interest from the first day of employment.

The Ministry of Defence adopts a zero-tolerance approach to unacceptable behaviours, which includes bullying, harassment, sexual harassment, discrimination, and victimisation. You will not be eligible and will not be considered for this post if you have been dismissed from a role for such unacceptable behaviours within the last five years. This will also apply if you resign or otherwise leave a role but, because of an adverse decision, would have been dismissed for gross misconduct had you continued in that employment. Pre-employment checks will be carried out.

Feedback will only be provided if you attend an interview or assessment.