Security Controller

Zaizi Ltd; Cheltenham; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Loyalty Pension

Life Assurance

Hybrid working

WFH equipment allowance

5 days paid study leave

Personal Choice fund £500

Job summary

Zaizi Ltd is recruiting a Security Controller to lead our secure facility operations and ensure compliance with SPF, List X, and UK government requirements. You will manage vetting, incident response, and audits while liaising with MOD and other contracting authorities.

You will drive security strategy, oversee asset protection, and mentor a team across governance, risk, and personnel security in a dynamic, mission-critical environment.

Qualifications

• Must be a British national with active eDV clearance.
• Proven experience as Security Controller in List X environment.
• Deep SPF and List X knowledge, including FSA/iv.
• Ability to manage UKSV clearances for staff.

Responsibilities

• Act as the officially appointed Security Controller responsible to the Board for all day-to-day security aspects.
• Oversee receipt, storage, and disposal of classified documents and assets.
• Prepare for external audits by MOD Defence Equipment & Support (DE&S) and accreditors.
• Manage visitor control and vetting of visitors, contractors, and international guests.
• Oversee lifecycle of UK security vetting (UKSV) for staff.
• Conduct initial security briefings for new hires and ongoing aftercare duties.
• Monitor insider threats and liaise with HR and line management.
• Serve as the primary government interface for security officials.
• Lead investigations and reporting of security breaches to Contracting Authority and ISAC.
• Advise Board on security implications of contracts, moves or ownership changes.
• Collaborate with IT to align physical and cyber security and IS0 standards implementation.
• Support bid team with security capability statements for tenders.

Skills

Security management

List X compliance

Vetting management

Incident response

Audits & inspections

Stakeholder liaison

Education

BTEC Level 3 in Security

DISA / SyI qualifications

Tools

Access control systems

Security incident software

Job description

Zaizi is a software consultancy specialising in building bespoke digital solutions for central government and national security agencies. As we deepen our work with the Ministry of Defence (MOD) and the Intelligence Community, we are establishing a secure facility to support our client work.

We are seeking a dedicated Security Controller to lead this critical function. You will be the primary authority on all physical and personnel security matters, serving as the bridge between Zaizi, the MOD, and other secure government contracting authorities. This is not just a compliance role; it is a strategic enabler that allows Zaizi to deliver

Secure Facility Management & Compliance

• Mandatory Oversight: Act as the officially appointed Security Controller responsible to the Board for all day-to-day security aspects.
• Asset Protection: Manage the receipt, storage, distribution, and disposal of classified documents and assets in accordance with government standards.
• Inspections & Audits: Prepare for and manage external audits from MOD Defence Equipment & Support (DE&S) and other accreditors. Maintain the Security Risk Management and Company Security Instructions. Complete yearly Crypto audits and related filings.
• Visitor Control: Manage strict access control systems for the facility, including the vetting and escorting of visitors, contractors, and international guests in compliance with IVCO (International Visits Control Office) protocols.

Personnel Security (Vetting)

• Clearance Management: Oversee the lifecycle of United Kingdom Security Vetting (UKSV) and other clearances for all staff and associates.
• Aftercare & Training: Conduct initial security briefings for new hires and ongoing "aftercare" duties. Ensure all staff understand their personal responsibilities under the Official Secrets Act and the Security Policy Framework.
• Insider Risk: Monitor for and mitigate insider threats, conducting risk assessments and maintaining close liaison with HR and line management regarding staff reliability.

Strategic Security Liaison

• Government Interface: Serve as the primary point of contact for government security officials.
• Incident Response: Lead the investigation and reporting of any security breaches or incidents to the relevant Contracting Authority and the Industry Security Assurance Centre (ISAC).
• Advisory: Advise the Board and Senior Leadership Team on security implications of new contracts, office moves, or changes in company ownership/structure.

Integrated Security Support

• Collaborate with the IT Manager (responsible for ISO 27001/Cyber Essentials Plus) to ensure physical and cyber security measures are aligned and the successful implementation of ISO’s.
• Support the bid team by providing security capability statements for tenders requiring facility clearances.

Required Skills & Experience

• Essential:
  • Citizenship: Must be a British National.
  • Experience: Proven experience as a Security Controller (or Deputy) within a UK Defence or National Security "List X" environment.
  • Regulatory Knowledge: Deep understanding of the Security Policy Framework (SPF), Cabinet Office security controls, and List X requirements (specifically FSA/iv).
  • Vetting: Active eDV clearance
  • Detail Oriented: Meticulous record-keeping skills for musters, visitor logs, and classified document registers.
• Desirable:
  • DISA / SyI membership or equivalent professional security qualifications (e.g., BTEC Level 3 in Security Management).
  • Experience liaising with the International Visits Control Office (IVCO) for overseas visits and classified exchanges.
  • Experience establishing a new List X facility from scratch.

Compensation

• Competitive Pay: Salaries reviewed annually to ensure they reflect your performance and market value.
• Loyalty Pension: We invest in your future. Starting at a 5% employer contribution, we increase this by 0.5% every year after your third anniversary, up to a maximum of 8%.
• Protection: Comprehensive Group Life Assurance for peace of mind.

Purpose & Culture

• Real Impact: Work on mission-critical projects that secure and improve the UK's digital infrastructure.
• Autonomy: A culture that empowers you to make decisions, prototype rapidly, and iterate towards success.
• Service & Community: We support those who serve. 10 paid days for Reservist Military Service.

Work / Life Balance

• Time Off: 25 days annual leave + Bank Holidays, with the flexibility to Buy/Sell additional days to suit your lifestyle.
• Giving back: 2 paid volunteering days per year.

Development & Growth

• Master Your Craft: Fully funded professional certifications (AWS, GCP, Agile, etc.) supported by 5 days paid study leave.
• Expand Your Horizons: An additional £500 annual "Personal Choice" fund to learn whatever inspires you—work-related or not.
• Support: Access to 1-2-1 professional coaching and team training to accelerate your career.

Health & Balance

• Premium Health: Vitality Private Medical Insurance (includes Apple Watch, gym discounts, and rewards).
• Flexibility: Genuine hybrid working with a WFH equipment allowance to perfect your home setup.

• Wellbeing: Cycle to Work scheme and a commitment to sustainable, healthy working practices.