FCAS Security – Lead for Policy, Assurance and Compliance

BAE Systems; Lancaster; Hybrid; GBP 54,000 - 70,000; Full time

Job summary

BAE Systems is seeking a Security Professional focused on Policy, Assurance and Compliance at their Warton location. The role involves providing expert advice on security standards and ensuring compliance with legal requirements. Candidates should possess significant experience in stakeholder management, strategic thinking, and risk management methodologies. Join a team that values diversity and offers flexible working arrangements while playing a vital role in safeguarding important information and assets.

Benefits

Competitive pension scheme

Employee share plans

Flexible health and wellbeing benefits

Shopping discounts

Qualifications

• Experience engaging with HMG partners on security issues.
• Ability to manage conflicting priorities across complex programmes.
• Demonstrated experience in risk management methodologies.

Responsibilities

• Develop and review security policies and standards.
• Plan and conduct internal security compliance audits.
• Serve as a subject matter expert on security policy compliance.

Skills

Stakeholder management

Strategic thinking

Problem solving

Policy shaping

Job description

Job title:Security Professional – Policy, Assurance and Compliance

Location: Warton. We offer a range of hybrid and flexible working arrangements – please speak to your recruiter about the options for this particular role.

Salary:£54,793+

What you’ll be doing:

• Provide expert advice on developing, reviewing and updating security policies, standards, procedures and guidelines
• Policies focus on data protection (e.g., MoD and HMG Standards, GDPR, UK Data Protection Act), IT security (e.g., access controls, network security, system hardening) and physical and personnel security (e.g., access control, surveillance, culture and awareness, environmental security, personnel vetting, security clearance management and insider threat mitigation)
• Ensure alignment with business objectives, legal requirements, industry best practices (e.g., MoD Standards, ISO 27001, NIST) and contractual obligations and emerging security threats
• Plan, conduct and manage internal security compliance audits and assessments, providing advice on adherence to policies and standards and performing assurance activities to validate their effectiveness
• Identify and report on non-compliance and advise on remediation strategies, including providing assurance that remediation actions are effectively implemented
• Serve as a subject matter expert on security policy compliance, assurance and best practice, providing guidance and support to internal and external stakeholders
• Stay informed about evolving data protection laws, security regulations and standards, providing advice to ensure BAE Systems FCAS’s policies and practices remain compliant and providing assurance that changes are implemented correctly and effectively
• Collaborate with MOD, industry, and internal stakeholders to enhance security and risk management by developing effective treatment plans, improving threat awareness, and implementing KPIs to monitor compliance and assurance activities

Your skills and experiences:

• Stakeholder management skills and experience of engagement on complex security issues with HMG partners
• Ability to manage conflicting priorities and emerging requirements to understand implications and consequences across complex programmes
• Experience in strategic thinking, problem solving and judgement
• Experience in delivering complex programme needs that require diplomacy and resilience
• Demonstrated experience of shaping policy and procedures. Good understanding of risk management methodologies

Benefits:

As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts – you may also be eligible for an annual incentive.

FCAS Security Team

Reporting to the FCAS Head of Integration and Delivery, the Senior Professional for Policy, Assurance and Compliance provides crucial advice to BAE Systems FCAS on maintaining robust adherence to security policies and providing assurance of their effectiveness.

By joining our FCAS Security team, you will play a vital role in safeguarding BAE Systems’ people, information, infrastructure, and asset.

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date:8th July 2025

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

#LI-JBK

#LI-Hybrid