Defence Information Security Manager

<p class="text-muted mb-3">Defence Information Security Manager (DISM) </p>

<p class="text-muted mb-3">Flexible / national, with regular UK site travel and occasional overseas travel as required</p>

<p class="text-muted mb-3">Permanent </p>

<p class="text-muted mb-3"> </p>

<p class="text-muted mb-3">Summary </p>

<h5 class="fw-bold text-success mt-4 mb-3">We're seeking a Defence Information Security Manager (DISM) to manage and provide day-to-day assurance across information, personnel, physical and protective security within the IT Services Defence Sector. You'll ensure compliance with MOD, government, contractual, NG Bailey and ISO/IEC 27001 requirements while providing expert security assurance, driving best practice and supporting the secure delivery of Defence contracts. As the sector's key security contact, you'll work closely with customers, operational teams and internal stakeholders, conduct site audits and assessments, manage security incidents, and support the continual improvement of security compliance and assurance processes. </h5>

<p class="text-muted mb-3"> </p>

<p class="text-muted mb-3">Key deliverables for the role include: </p>

<p class="text-muted mb-3">Demonstrate strong Health and Safety leadership by planning and conducting site visits and audits in line with NG Bailey</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, ensuring personal safety, site access compliance and operational considerations are effectively managed.</h5>

<p class="text-muted mb-3">Promote a strong security culture by providing expert guidance and challenge to leaders, managers and project teams, ensuring employees understand and meet their security responsibilities and contractual obligations. </p>

<p class="text-muted mb-3">Develop, maintain and continually improve Defence Security policies, procedures and documentation, ensuring they remain compliant, risk-based and auditable, and aligned to contractual, operational and threat landscape changes.</p>

<p class="text-muted mb-3">Provide security assurance and expertise for bids, contract mobilisations, operational changes, new sites and evolving customer</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, ensuring appropriate security controls are implemented and maintained.</h5>

<p class="text-muted mb-3">Plan and deliver a risk-based programme of security audits and assurance visits across Defence sites, assessing security controls, supporting internal and external audits and driving corrective actions through to successful resolution.</p>

<p class="text-muted mb-3">Undertake security risk assessments and provide expert advice on risk mitigation, compliance and security improvements, escalating significant risks and recommending proportionate solutions to support informed decision-making.</p>

<p class="text-muted mb-3">Deliver engaging security training, briefings and awareness programmes, ensuring Defence personnel understand their security responsibilities and remain informed of relevant policies, risks and security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Support Personnel Security and vetting processes by providing guidance on clearance</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, onboarding and offboarding activities, and ensuring security-related information is managed compliantly and securely. </h5>

<p class="text-muted mb-3">Operate and maintain the Defence Security Compliance Register processes, ensuring that records, evidence, actions and status information remain accurate, current and compliant. Develop the knowledge and competence required to support any future controlled transfer of system responsibilities following a structured handover, while working within agreed system ownership and change-control arrangements. </p>

<p class="text-muted mb-3">Coordinate and support the effective management of security incidents, ensuring timely reporting, investigation, escalation, corrective action and continuous improvement across the Defence Sector. </p>

<p class="text-muted mb-3">Act as the primary day-to-day Defence Sector security contact, building effective relationships with customers and internal stakeholders, providing security reporting and assurance, and escalating significant risks and compliance matters.</p>

<p class="text-muted mb-3">Maintain expertise in MOD, government, contractual and ISO/IEC 27001 security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, applying emerging threats, policy changes and industry guidance to strengthen Defence Sector security and compliance.  </h5>

<p class="text-muted mb-3">Maintain awareness of Facility Security Clearance</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements and, when needed, support Facility Security Controller responsibilities. </h5>

<p class="text-muted mb-3">What we're looking for </p>

<p class="text-muted mb-3">Proven experience in protective, personnel, physical or information security within Defence, government, critical infrastructure or another sensitive environment. </p>

<p class="text-muted mb-3">Working knowledge of personnel security, BPSS and national security vetting processes. </p>

<p class="text-muted mb-3">Working knowledge of ISO/IEC 27001 and its application to operational and Defence environments. </p>

<p class="text-muted mb-3">Experience developing policies and procedures, planning and conducting audits, security reviews or risk assessments, and producing clear written findings. </p>

<p class="text-muted mb-3">Ability to analyse complex information, maintain accurate records and manage multiple actions to completion.</p>

<p class="text-muted mb-3">High levels of discretion, integrity, self-motivation and organisation. </p>

<p class="text-muted mb-3">Full competence and confidence in using Microsoft 365 applications as part of day-to-day business operations. </p>

<p class="text-muted mb-3"> </p>

<p class="text-muted mb-3">Security clearance and continued eligibility </p>

<p class="text-muted mb-3">The successful candidate must be willing and able to undertake Security Check (SC) clearance. Appointment to, and continued employment in, the role is subject to obtaining and maintaining the level of security clearance and any customer or role-specific access approvals required for the position.  </p>

<p class="text-muted mb-3">Desirable </p>

<p class="text-muted mb-3">Experience supporting MOD, Defence supplier or secure government contracts.</p>

<p class="text-muted mb-3">Familiarity with Government Security Function</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, GovS 007, MOD Industry Security Notices, contractual Security Aspects Letters and Defence assurance processes.</h5>

<p class="text-muted mb-3">ISO/IEC 27001 Lead Auditor, Lead Implementer or equivalent audit/assurance experience.</p>

<p class="text-muted mb-3">Experience supporting security incidents and formal reporting routes.</p>

<p class="text-muted mb-3">Experience with automated compliance registers, workflow tools or data-driven assurance processes.</p>

<p class="text-muted mb-3">Experience delivering security inductions, toolbox talks or awareness programmes.</p>

<p class="text-muted mb-3">Awareness of Facility Security Clearance arrangements and Facility Security Controller responsibilities.</p>

<p class="text-muted mb-3">Relevant security, audit, risk or information security qualification is desirable. Equivalent demonstrable experience will be considered.</p>

<p class="text-muted mb-3">Full UK driving capability and willingness to travel regularly within the UK and, where required, overseas, including occasional short-notice travel. </p>

<p class="text-muted mb-3">Next Steps: </p>

<p class="text-muted mb-3">As a business, we’re on a journey to build on our culture where everyone is included, treated fairly and with respect. This starts with recruitment and how we bring people into the organisation.  </p>

<p class="text-muted mb-3">We’ll do our best to outline the recruitment process to you ahead of time with plenty of notice. If you require any accommodations to participate in the application or interview process, please let us know and we will work with you to ensure your needs are met. </p>

<p class="text-muted mb-3">About Us: </p>

<p class="text-muted mb-3">We are one of the leading independent engineering and services businesses in the UK. Founded in 1921, with a turnover of £500m and 3000 employees, we are proud of our history of developing great people through our investment in training. </p>

<p class="text-muted mb-3">Working across a variety of sectors within the building and infrastructure industry, our innovative, responsible and forward-thinking approach allows us to work on fantastic ground-breaking projects, providing solutions using the latest tools and technologies. </p>

<p class="text-muted mb-3">Progression is something we value, and we will make sure that when you join us you have a clearly defined development path, supported by regular reviews, training and ongoing support to enable you to be the best you can be. </p>

<p class="text-muted mb-3">#LI-LP1</p>

<p class="text-muted mb-3">#LI-hybrid</p>