Site Security & Compliance Manager (ISO 14298)

Crane Authentication (NXT); North East; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Life Insurance

Company Pension Scheme

25 days annual leave

Job summary

Crane Authentication in the United Kingdom seeks an ISO 14298 Site Security Manager to lead the security program across Leicester and Washington sites, ensuring ISO standards and robust controls for physical, information, and supply-chain security.

You will coordinate with Operations, Quality, EHS, IT, Legal/Compliance, and R&D to embed security in daily activities, own SPMS documentation, and drive audits and improvements while overseeing personnel vetting and business continuity plans.

Qualifications

• Professional certifications in ISO management systems (e.g., ISO 27001 Lead Implementer/Auditor) advantageous.
• Significant experience in security management within security printing, identity documents, banknote, or highly regulated manufacturing.
• Proven track record implementing and maintaining ISO 14298, ISO 27001/9001 and leading audits/certifications.
• Demonstrated ability to design and operate end-to-end controls for secure materials, data, and processes.

Responsibilities

• Lead the site security program in alignment with ISO 14298 and company policies.
• Chair Security Management Reviews; track actions, KPIs, and improvements.
• Partner with Operations, Quality, EHS, IT, Legal/Compliance, and R&D to embed security into daily activity and change initiatives.
• Own SPMS documentation (policies, procedures, risks, records, secure forms) and ensure proper document control.
• Maintain all customer related security requirements.
• Lead periodic and project-based risk assessments across physical, information, personnel, product, and supply-chain domains.
• Complete internal inspections and drive corrective actions in line with the requirements of security standards.
• Provide support for Security Operations Centre personnel.
• Define and implement proportionate preventive, detective, and corrective controls.
• Manage perimeter, building, and access controls, visitor processes, CCTV, intrusion detection, and key/lock systems.
• Oversee personnel vetting, confidentiality requirements, and need-to-know permissions.
• Ensure end-to-end secure material handling (receiving, storage, WIP, reconciliation, destruction, dispatch).
• Oversee validated processes, change control, and documented approvals.
• Coordinate with IT/InfoSec to secure digital assets (design files, data, keys) via encryption, access control, backups, and controlled transfers; align with ISO 27001 where relevant.
• Plan and execute internal audits; manage external audits for ISO 14298 and customer requirements.
• Lead corrective/preventive actions and maintain certification evidence.
• Deliver training on security procedures and incident response; maintain competency records.
• Lead incident response, investigations, root-cause analysis, reporting, and corrective/preventive actions.
• Assess and monitor security-critical suppliers; ensure contractual and audit controls.
• Serve as primary contact for customer security requirements and audits.
• Manage security elements of business continuity and disaster recovery; ensure protection of assets and rapid recovery.
• Track KPIs and report performance to leadership; manage the security budget.

Skills

ISO 14298

Physical security

Information security

Supply-chain security

Risk management

Leadership

Communication

Stakeholder management

Microsoft 365

Incident management

Education

ISO Management Systems certifications

ISO 27001 Lead Implementer/Auditor

Tools

Security programs tools

Job description

Crane Authentication in the United Kingdom seeks an ISO 14298 Site Security Manager to lead the security program across Leicester and Washington sites, ensuring ISO standards and robust controls for physical, information, and supply-chain security.

You will coordinate with Operations, Quality, EHS, IT, Legal/Compliance, and R&D to embed security in daily activities, own SPMS documentation, and drive audits and improvements while overseeing personnel vetting and business continuity plans.