Critical National Infrastructure Specialist

Job Description

As a CNIS Specialist you will work in a small team providing strategic leadership and expert capability across physical, personnel, cyber, and supply chain security for the Corporate Management, Assurance and Security team. The team ensures compliance with national security obligations, resilience and risk management.

We are recruiting for three roles:

• CNIS Protective Security Specialist
  : lead protective security risk assessments and controls across CNIS assets, design and publish standards, coordinate incident playbooks and after‑action reviews.
• CNIS Personnel Security and Vetting Specialist
  : define and assure role-based vetting and personnel security requirements across CNIS roles and contractors, embed insider risk controls, partner with HR, Professional Standards and Security to manage investigations and cases, and create training requirements.
• Commercial Security Assurance Specialist
  : ensure contracts, procurement and supplier management do not compromise CNIS security, work with Commercial on security clauses and procurement advice, run supplier due diligence and ongoing assurance, coordinate with NPSA/NCSC guidance for supply chain risk, monitor contract performance against security KPIs.

• Conduct site risk assessments and define protective measures.
• Provide security design requirements for new builds or major changes, reviewing specifications.
• Coordinate with CTSA for site advice and plan testing/exercises.
• Oversee incident management playbooks and after‑action reviews for physical incidents.
• Set role‑based vetting in partnership with the Defra group Security on applications.
• Embed insider risk controls and partner with Professional Standards.
• Manage investigations and cases with HR and Security.
• Define, create and manage training requirements.
• Work with Commercial on CNIS security clauses and schedules.
• Provide advice during procurement and on managing contracts securely.
• Run supplier due diligence and ongoing assurance.
• Coordinate with NPSA/NCSC guidance for supply chain risk, advising on remediation and termination where needed.
• Monitor contract performance against security KPIs, escalating non‑conformance.

• 5 or more years in protective security; familiarity with site operations and design standards.
• 5 or more years in personnel security/vetting; understand UK government vetting regimes and insider risk.
• 5 or more years in procurement/supply chain security; strong contracting knowledge and supplier assurance.
• Building effective partnerships to jointly manage risks with internal and external organisations.
• Ability to work with senior people, manage multiple priorities and competing demands.
• Experience of stakeholder management, with clear communication and engagement skills.
• Conditional requirement to achieve Security Check (SC) level of National Security Vetting.

We are fully committed to having a diverse and inclusive workforce to reflect the communities we serve.

We also have a Guaranteed Interview Policy to support those with a disability whose application meets the minimum criteria for the post.