Compliance Officer

VanWonen; City of Norwich (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

MSI-DS is seeking a Compliance Officer and Security Controller to lead regulatory adherence, security governance, and risk management across the organisation. You will oversee vetting, access control, and information handling while coordinating with regulators and accreditation bodies.

The role offers progressive development opportunities, with exposure to governance frameworks, audits, and continuous improvement initiatives across multiple functions.

Qualifications

• Extensive experience in compliance, security, auditing, risk management, or quality assurance roles within regulated or high-security environments.
• Strong knowledge of UK Government security frameworks, MoD requirements, Known Consignor regulations and Cyber Essentials Plus
• Proven experience managing security vetting processes (BPSS, SC, DV), personnel security, and government-led audits and inspections.
• Skilled in engaging with government agencies, regulatory authorities, and external security stakeholders.
• Demonstrated ability to identify, assess, and mitigate compliance, security, and operational risks.
• Excellent written, verbal, and interpersonal communication skills, with the ability to influence stakeholders at all levels.
• Strategic and proactive mindset with strong analytical and problem-solving abilities.
• High levels of integrity, professionalism, and discretion when handling sensitive or classified information.
• Strong attention to detail and resilience, maintaining performance during audits, investigations, and incident response activities.
• Proficient in Microsoft Office applications, including Word, Excel, and PowerPoint.

Responsibilities

• Ensure compliance with all applicable legal, regulatory, and industry requirements, including GDPR, export controls, ISO standards, GovS007, and Known Consignor regulations.
• Lead and oversee physical, personnel, and information security programmes, including vetting, access control, classified information handling, and security awareness.
• Monitor regulatory changes and implement policies, procedures, and controls to maintain organisational compliance.
• Act as Security Programme Manager for the Known Consignor scheme and maintain relationships with regulators, government agencies, and accreditation bodies.
• Manage organisational risk, maintain the risk register, and provide assurance to senior leadership on the effectiveness of controls and governance arrangements.
• Lead internal and external audits, inspections, accreditations, and corrective action programmes to drive continuous improvement.
• Develop governance frameworks, performance reporting, and compliance maturity measures across the business.
• Deliver compliance training, provide expert advice, and support the investigation and management of compliance incidents and breaches.
• Embed compliance and security requirements into business processes through collaboration with HR, IT, SHEQ, Operations, and other functions.
• Ensure appropriate regulatory reporting, protection of sensitive information, and adherence to the need-to-know principle.

Skills

Security governance

Auditing

Risk management

Regulatory compliance

Stakeholder engagement

Analytical thinking

Communication

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Our Vision

To be the most trusted partner in defence systems, delivering mission-critical solutions that protect those who serve and strengthen national security today and for generations.

Our Values

Safety and integrity first

Unwavering accountability

Customer trust, earned daily

Collaboration and inclusion

Engineering excellence

Security and compliance

Sustainable value

The Role

As the Compliance Officer and designated Security Controller you will be responsible for ensuring that MSI-DS operates in full compliance with all applicable legal, regulatory, security, and governance requirements. This role provides oversight of compliance frameworks, policies, and controls, ensuring risks are effectively managed and MSI-DS maintains the highest standards of integrity, security, and regulatory adherence.

This is a progressive role with excellent development opportunities. For the right candidate, the position can grow and evolve with the business, offering increased responsibility and scope over time

Key Responsibilities

• Ensure compliance with all applicable legal, regulatory, and industry requirements, including GDPR, export controls, ISO standards, GovS007, and Known Consignor regulations.
• Lead and oversee physical, personnel, and information security programmes, including vetting, access control, classified information handling, and security awareness.
• Monitor regulatory changes and implement policies, procedures, and controls to maintain organisational compliance.
• Act as Security Programme Manager for the Known Consignor scheme and maintain relationships with regulators, government agencies, and accreditation bodies.
• Manage organisational risk, maintain the risk register, and provide assurance to senior leadership on the effectiveness of controls and governance arrangements.
• Lead internal and external audits, inspections, accreditations, and corrective action programmes to drive continuous improvement.
• Develop governance frameworks, performance reporting, and compliance maturity measures across the business.
• Deliver compliance training, provide expert advice, and support the investigation and management of compliance incidents and breaches.
• Embed compliance and security requirements into business processes through collaboration with HR, IT, SHEQ, Operations, and other functions.
• Ensure appropriate regulatory reporting, protection of sensitive information, and adherence to the need-to-know principle.

Your Team

You will be working as part of the BI, Facilities, Security and SHEQ team, reporting to the Director of BI, Facilities, Security and SHEQ.

Your Experience

Essential

• Extensive experience in compliance, security, auditing, risk management, or quality assurance roles within regulated or high-security environments.
• Strong knowledge of UK Government security frameworks, MoD requirements, Known Consignor regulations and Cyber Essentials Plus
• Proven experience managing security vetting processes (BPSS, SC, DV), personnel security, and government-led audits and inspections.
• Skilled in engaging with government agencies, regulatory authorities, and external security stakeholders.
• Demonstrated ability to identify, assess, and mitigate compliance, security, and operational risks.
• Excellent written, verbal, and interpersonal communication skills, with the ability to influence stakeholders at all levels.
• Strategic and proactive mindset with strong analytical and problem-solving abilities.
• High levels of integrity, professionalism, and discretion when handling sensitive or classified information.
• Strong attention to detail and resilience, maintaining performance during audits, investigations, and incident response activities.
• Proficient in Microsoft Office applications, including Word, Excel, and PowerPoint.

Desirable

• Prior experience supporting security in multi-site or international defence environments.

Your Qualifications

Essential:

• Must be able to meet the SC Security clearance criteria for this role
• DISA-accredited Security Controller and Personnel Security & Vetting training – Document/Information Security, IVCO/Contracts, Security Clearance Procedures, Document Security Procedures.

Desirable

• Relevant professional security qualification (e.g., CSyP, CPP, MSc Security & Risk Management)
• BTEC LEVEL 2 - Applying Security Controls within the Defence Industry
• CPD Approved GDPR compliance