Assistant Manager, Security Advice, Project Assurance and Facility Management

Deloitte (UK); Alabama; Hybrid; USD 87,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Training & development

Job summary

Deloitte Business Security (DBS) seeks a Security Specialist to lead security operations, assurance and governance across governmental and public service engagements. The role focuses on compliance with SPF and GovS007, handling security controls and cryptographic material, and supporting a DV-cleared team.

You will work on-site with a hybrid model from London, contributing to a growing function and shaping security strategy and risk management for high-impact clients.

Qualifications

• Familiar with Government security policy frameworks (SPF) and GovS007 standards.
• Knowledge of the Official Secrets Act (OSA).
• Experience handling cryptographic material or related security controls.
• Currently hold Developed Vetting (DV) clearance or equivalent.
• Strong governance, risk & security management skills across government/public sector.
• Excellent written and verbal communication with diverse stakeholders.

Responsibilities

• Support Security Manager and Controller with security operations and assurance.
• Provide security advice on physical, personnel and information security.
• Ensure compliance with security policy framework and government standards.
• Coordinate security operations and report outcomes with clear recommendations.
• Maintain security controls and asset registers, including Protected Document Register.
• Develop and monitor security roadmaps and future initiatives.

Skills

SPF GovS007

OSA knowledge

Cryptography

DV clearance

Security governance

Stakeholder communication

Job description

Are you an experienced security professional who can be at the forefront of assuring Deloitte are compliant with the principles embedded within relevant Government standards?

Are you ready to contribute your expertise to the highest levels of security advice, providing recommendations for controls, processes, and protocols in all aspects of physical, personnel and information security?

We are seeking a Security Specialist to join our team within Deloitte Business Security (DBS), who are part of the Deloitte Quality, Risk and Security (QRS) community.

Quality, Risk and Security (QRS) is an overarching identity for all the professionals who manage quality and risk for Deloitte. It comprises:Deloitte Business Security (DBS), National Quality and Risk Management (NQRM), Quality & Risk Operations (QR Ops), and Service Line Quality and Risk Management teams (including Switzerland) and is led by a dedicated partner who sits on the firm’s Executive.

Within QRS, we use our skills and experience across a variety of disciplines to support a risk intelligent culture at Deloitte; enabling our partners and practitioners to deliver high quality services to their clients, minimising the administrative burden on our people, and acting as custodians of firm risk, security, ethics, and reputation.

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, we help our clients' become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte?It’show we approach the thousands of decisions we make everyday. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, whereverwe arein the world, welead the way,serve with integrity, take care of each other ,fosterinclusion, andcollaborate for measurable impact. These five shared values lead every decision wemake and action we take, guiding us to deliver impact how and where it mattersmost .

Connect to your opportunity

This role is part of a growing team, and a tremendous opportunity to contribute to a developing function with direct impact for its operational growth.

You’ll be responsible for supporting the Security Manager and Security Controller with security operations, assurance, and administration. The key tasks will include:

• Working with our Defence Security and Justice Account, you will build and maintain strong business relationships throughout.
• Working predominantly on site to provide security advice and support to Deloitte staff, ensuring our continued compliance with Client processes.
• Ensuring compliance with the firm’s security policy framework and observance of principles outlined in government regulations and standards i.e. HMG SPF, Functional standards GovS007.
• Delivering the efficient and effective co-ordination and execution of security operations in the areas of physical, material, document, personnel, and information security.
• Implementing policies and processes in accordance with corporate governance in relation to security, providing reports clearly defining outcomes and recommendations.
• Ensuring HMG accreditations remain valid, by undertaking any security related tasking issued by the Security Manager and Security Controller.
• Support the Security Controller in the delivery of the security roadmap, strategies, and future initiatives, ensuring all reviews and work streams are completed to agreed timescales and adequate standard.
• Providing security and risk management advice for Deloitte practitioners working across government and public services.
• Report all suspected security breaches and if required, carry out thorough investigations of any suspected security breaches making recommendations for appropriate actions.
• Develop, implement and monitor physical and information asset security controls, acting as custodian for security related material.
• Maintain and manage the Protected Document Register (PDR) and Government Security Classified (GSC) materiel held by the Government & Public Services Security Team.
• Escalate security issues directly to the Security Manager in the first instance, ensuring communications are controlled and managed accordingly.
• Oversee and coordinate the technical programming of access passes, ensuring the adherence of relevant policy.
• Promote awareness of the latest HMG and Deloitte security requirements, conduct security education and culture training, including induction, continuation training and off-boarding.
• Act as the primary point of contact for facility users for room bookings, functionality, appropriate use, access, faults and facility maintenance.
• Provide security education and training, including briefings to new joiners and refresher training as appropriate.

Connect to your skills and professional experience

• Working knowledge of HMG Security Policy Framework (SPF) and Functional Standard GovS007 and the Official Secrets Act (OSA).
• Ability to handle security material effectively, ideally including cryptographic material.
• Excellent interpersonal communication skills, both written and verbal.
• Strong IT skills – Microsoft 365 products, applications, and services.
• Currently hold Developed Vetting (DV) clearance.
• Experience in government or other regulated industry, specifically security supervision/assurance.
• DISA training e.g. Role of the Security Controller, security vetting.
• Formal security qualification e.g. L3 Security management and above, CISM.

Connect to your business - Enabling Functions

Collaboration is central to everything we do at Deloitte. From IT to HR, marketing and more, our teams help to support the wider business in everything they do. Bringing your individual skills and specialist knowledge, you can make a far-reaching impact. Come join us.

National Quality and Risk Management

We ensure we manage our business with integrity. This includes developing and managing assurance and business risk frameworks, anti-money laundering, addressing any potential conflicts of interest amongst clients and maintaining our independence from them, ensuring we’re compliant and managing the security of our people.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment team will provide further detail as you progress through the recruitment process or you can contact the Independence team upon request.

Connect with your colleagues

"The amount of investment in me in terms of training and development has been incredible - it has undoubtedly helped me to progress my career." - Jim, Enabling Functions

Our hybrid working policy

You’ll be based in London with hybrid working.

At Deloitte we understand the importance of balancing your career alongside your home life. That’s why we’ll support you to work flexibly through our hybrid working policy. Depending on the requirements of your role, you’ll have the opportunity to work in your local office, virtual collaboration spaces, client sites and remotely. You’ll get the chance to meet face to face when needed, while you collaborate and learn from colleagues, share your experiences, and build the relationships that will fuel your career and prioritise your wellbeing. Please check with your recruiter for the specific working requirements that may apply for your role.

Our commitment to you

Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.

We want you. The true you. Your own strengths, perspective and personality. So we’re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we’ll take your wellbeing seriously, too. Because it’s only when you’re comfortable and at your best that you can make the kind of impact you, and we, live for.

Your expertise is our capability, so we’ll make sure it never stops growing. Whether it’s from the complex work you do, or the people you collaborate with, you’ll learn every day. Through world-class development, you’ll gain invaluable technical and personal skills. Whatever your level, you’ll learn how to lead.

Connect to your next step

A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you’ll experience a purpose you can believe in and an impact you can see. You’ll be free to bring your true self to work every day. And you’ll never stop growing, whatever your level.

Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk/careers