Defence Information Security Manager

Flexible / national, with regular UK site travel and occasional overseas travel as required

Permanent

We're seeking a Defence Information Security Manager (DISM) to manage and provide day-to-day assurance across information, personnel, physical and protective security within the IT Services Defence Sector. You'll ensure compliance with MOD, government, contractual, NG Bailey and ISO/IEC 27001 requirements while providing expert security assurance, driving best practice and supporting the secure delivery of Defence contracts. As the sector's key security contact, you'll work closely with customers, operational teams and internal stakeholders, conduct site audits and assessments, manage security incidents, and support the continual improvement of security compliance and assurance processes.

• Demonstrate strong Health and Safety leadership by planning and conducting site visits and audits in line with NG Bailey requirements, ensuring personal safety, site access compliance and operational considerations are effectively managed.
• Promote a strong security culture by providing expert guidance and challenge to leaders, managers and project teams, ensuring employees understand and meet their security responsibilities and contractual obligations.
• Develop, maintain and continually improve Defence Security policies, procedures and documentation, ensuring they remain compliant, risk-based and auditable, and aligned to contractual, operational and threat landscape changes.
• Provide security assurance and expertise for bids, contract mobilisations, operational changes, new sites and evolving customer requirements, ensuring appropriate security controls are implemented and maintained.
• Plan and deliver a risk-based programme of security audits and assurance visits across Defence sites, assessing security controls, supporting internal and external audits and driving corrective actions through to successful resolution.
• Undertake security risk assessments and provide expert advice on risk mitigation, compliance and security improvements, escalating significant risks and recommending proportionate solutions to support informed decision-making.
• Deliver engaging security training, briefings and awareness programmes, ensuring Defence personnel understand their security responsibilities and remain informed of relevant policies, risks and security requirements.
• Support Personnel Security and vetting processes by providing guidance on clearance requirements, onboarding and offboarding activities, and ensuring security-related information is managed compliantly and securely.
• Operate and maintain the Defence Security Compliance Register processes, ensuring that records, evidence, actions and status information remain accurate, current and compliant. Develop the knowledge and competence required to support any future controlled transfer of system responsibilities following a structured handover, while working within agreed system ownership and change-control arrangements.
• Coordinate and support the effective management of security incidents, ensuring timely reporting, investigation, escalation, corrective action and continuous improvement across the Defence Sector.
• Act as the primary day-to-day Defence Sector security contact, building effective relationships with customers and internal stakeholders, providing security reporting and assurance, and escalating significant risks and compliance matters.
• Maintain expertise in MOD, government, contractual and ISO/IEC 27001 security requirements, applying emerging threats, policy changes and industry guidance to strengthen Defence Sector security and compliance.
• Maintain awareness of Facility Security Clearance requirements and, when needed, support Facility Security Controller responsibilities.

• Proven experience in protective, personnel, physical or information security within Defence, government, critical infrastructure or another sensitive environment.
• Working knowledge of personnel security, BPSS and national security vetting processes.
• Working knowledge of ISO/IEC 27001 and its application to operational and Defence environments.
• Experience developing policies and procedures, planning and conducting audits, security reviews or risk assessments, and producing clear written findings.
• Ability to analyse complex information, maintain accurate records and manage multiple actions to completion.
• High levels of…