Defence Information Security Lead

NG Bailey Group Limited; Cheltenham; In loco; GBP 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

NG Bailey Group Limited is seeking a Defence Information Security Manager (DISM) to lead day-to-day assurance across information, personnel, physical and protective security within the Defence sector. You will ensure MOD/government/contractual and ISO/IEC 27001 compliance while driving best practice and supporting secure delivery of Defence contracts.

You will coordinate security audits, risk assessments, training and incident response, acting as the primary Defence security contact with

Competenze

• Experience in protective, personnel, physical or information security within Defence, government, critical infrastructure or another sensitive environment.
• Knowledge of personnel security, BPSS and national security vetting processes.
• Knowledge of ISO/IEC 27001 and its application to operational/Defence environments.
• Experience developing policies and procedures, planning and conducting audits, security reviews or risk assessments, and producing clear written findings.
• Ability to analyse complex information, maintain accurate records and manage multiple actions to completion.
• Discretion, integrity, self-motivation and organisation.

Mansioni

• Demonstrate strong Health and Safety leadership by planning and conducting site visits and audits in line with NG Bailey requirements, ensuring personal safety, site access compliance and operational considerations are effectively managed.
• Promote a strong security culture by providing expert guidance and challenge to leaders, managers and project teams, ensuring employees understand and meet their security responsibilities and contractual obligations.
• Develop, maintain and continually improve Defence Security policies, procedures and documentation, ensuring they remain compliant, risk-based and auditable, and aligned to contractual, operational and threat landscape changes.
• Provide security assurance and expertise for bids, contract mobilisations, operational changes, new sites and evolving customer requirements, ensuring appropriate security controls are implemented and maintained.
• Plan and deliver a risk-based programme of security audits and assurance visits across Defence sites, assessing security controls, supporting internal and external audits and driving corrective actions through to successful resolution.
• Undertake security risk assessments and provide expert advice on risk mitigation, compliance and security improvements, escalating significant risks and recommending proportionate solutions to support informed decision-making.
• Deliver engaging security training, briefings and awareness programmes, ensuring Defence personnel understand their security responsibilities and remain informed of relevant policies, risks and security requirements.
• Support Personnel Security and vetting processes by providing guidance on clearance requirements, onboarding and offboarding activities, and ensuring security-related information is managed compliantly and securely.
• Operate and maintain the Defence Security Compliance Register processes, ensuring that records, evidence, actions and status information remain accurate, current and compliant. Develop the knowledge and competence required to support any future controlled transfer of system responsibilities following a structured handover, while working within agreed system ownership and change-control arrangements.
• Coordinate and support the effective management of security incidents, ensuring timely reporting, investigation, escalation, corrective action and continuous improvement across the Defence Sector.
• Act as the primary day-to-day Defence Sector security contact, building effective relationships with customers and internal stakeholders, providing security reporting and assurance, and escalating significant risks and compliance matters.
• Maintain expertise in MOD, government, contractual and ISO/IEC 27001 security requirements, applying emerging threats, policy changes and industry guidance to strengthen Defence Sector security and compliance.
• Maintain awareness of Facility Security Clearance requirements and, when needed, support Facility Security Controller responsibilities.

Conoscenze

Information security

Security governance

Audits & risk assessments

Microsoft 365 proficiency

Strumenti

ISO/IEC 27001

Descrizione del lavoro

NG Bailey Group Limited is seeking a Defence Information Security Manager (DISM) to lead day-to-day assurance across information, personnel, physical and protective security within the Defence sector. You will ensure MOD/government/contractual and ISO/IEC 27001 compliance while driving best practice and supporting secure delivery of Defence contracts.

You will coordinate security audits, risk assessments, training and incident response, acting as the primary Defence security contact with