Teams at SiXworks Limited

Manage ongoing security and compliance for internal infrastructure: perform cyber risk assessments, develop security policies and documentation, ensure system designs meet security outcomes, produce evidence for MOD regulations, advise project teams, and report cyber risks and compliance status to senior management.

Lead development and maintenance of information security, risk management, and compliance frameworks. Oversee incident response, vulnerability assessments, penetration testing, audits, and assurance reporting. Ensure alignment with standards (ISO 27001, Cyber Essentials, JSPs), GDPR compliance, governance, stakeholder engagement, training, and business continuity. Manage security resources and support secure-by-design throughout system lifecycles.

Design, build, and maintain secure infrastructure and tooling for mission-critical environments. Deploy and manage Kubernetes-based platforms, SIEM (Splunk), vulnerability scanning (Nessus), EDR and observability (fluentbit). Integrate security into CI/CD pipelines, automate security processes with scripting/IaC, document configurations, and collaborate with engineering and DevOps to embed DevSecOps practices and threat detection.