Your timer needs to be mounted in an enclosure to protect the connections. Where a flexible cable passes into an enclosure then a gland or clamp is needed to grip the cable sheath and prevent strain on the connections. The timer just need to break the live, (brown) wire between supply and your light, as you say NO and COM terminals.
There are several ways to physically meet those needs, my plug in suggestion just avoided modifying your floodlight.