Defence Information Security Lead: Assurance & Compliance

NG Bailey Group Limited; Northampton; On-site; GBP 70,000 - 90,000; Full time

Job summary

NG Bailey Group Limited seeks a Defence Information Security Manager (DISM) to lead day‑to‑day assurance across information, personnel, physical and protective security within the IT Services Defence Sector. You will ensure compliance with MOD, government, contractual, NG Bailey and ISO/IEC 27001 requirements while driving best practice and supporting secure delivery of Defence contracts.

You will conduct site audits, manage security incidents, support continual improvement, and act as the

Qualifications

• Proven experience in protective, personnel, physical or information security within Defence, government, critical infrastructure or another sensitive environment.
• Working knowledge of personnel security, BPSS and national security vetting processes.
• Working knowledge of ISO/IEC 27001 and its application to operational and Defence environments.
• Experience developing policies and procedures, planning and conducting audits, security reviews or risk assessments, and producing clear written findings.
• Ability to analyse complex information, maintain accurate records and manage multiple actions to completion.
• High levels of discretion, integrity, self-motivation and organisation.
• Full competence and confidence in using Microsoft 365 applications as part of day-to-day business operations.

Responsibilities

• Demonstrate strong Health and Safety leadership by planning and conducting site visits and audits in line with NG Bailey requirements, ensuring personal safety, site access compliance and operational considerations are effectively managed.
• Promote a strong security culture by providing expert guidance and challenge to leaders, managers and project teams, ensuring employees understand and meet their security responsibilities and contractual obligations.
• Develop, maintain and continually improve Defence Security policies, procedures and documentation, ensuring they remain compliant, risk‑based and auditable, and aligned to contractual, operational and threat landscape changes.
• Provide security assurance and expertise for bids, contract mobilisations, operational changes, new sites and evolving customer requirements, ensuring appropriate security controls are implemented and maintained.
• Plan and deliver a risk‑based programme of security audits and assurance visits across Defence sites, assessing security controls, supporting internal and external audits and driving corrective actions through to successful resolution.
• Undertake security risk assessments and provide expert advice on risk mitigation, compliance and security improvements, escalating significant risks and recommending proportionate solutions to support informed decision‑making.
• Deliver engaging security training, briefings and awareness programmes, ensuring Defence personnel understand their security responsibilities and remain informed of relevant policies, risks and security requirements.
• Support Personnel Security and vetting processes by providing guidance on clearance requirements, onboarding and offboarding activities, and ensuring security‑related information is managed compliantly and securely.
• Operate and maintain the Defence Security Compliance Register processes, ensuring that records, evidence, actions and status information remain accurate, current and compliant. Develop the knowledge and competence required to support any future controlled transfer of system responsibilities following a structured handover, while working within agreed system ownership and change‑control arrangements.
• Coordinate and support the effective management of security incidents, ensuring timely reporting, investigation, escalation, corrective action and continuous improvement across the Defence Sector.
• Act as the primary day‑to‑day Defence Sector security contact, building effective relationships with customers and internal stakeholders, providing security reporting and assurance, and escalating significant risks and compliance matters.
• Maintain expertise in MOD, government, contractual and ISO/IEC 27001 security requirements, applying emerging threats, policy changes and industry guidance to strengthen Defence Sector security and compliance.
• Maintain awareness of Facility Security Clearance requirements and, when needed, support Facility Security Controller responsibilities.

Skills

Defence security exp

ISO/IEC 27001

Security risk assessment

Audits & governance

Policy development

SC clearance readiness

MS 365 proficiency

Tools

Microsoft 365

Job description

NG Bailey Group Limited seeks a Defence Information Security Manager (DISM) to lead day‑to‑day assurance across information, personnel, physical and protective security within the IT Services Defence Sector. You will ensure compliance with MOD, government, contractual, NG Bailey and ISO/IEC 27001 requirements while driving best practice and supporting secure delivery of Defence contracts.

You will conduct site audits, manage security incidents, support continual improvement, and act as the