Security Assurance Officer

Role:
Security Assurance Officer

Location:

Hybrid, based from one of our offices in Derby, Manchester or Warrington

Rolls‑Royce SMR is here to transform how nuclear energy is delivered—cleaner, faster and at global scale. Our teams are developing one of the world’s most advanced small modular reactors, helping secure affordable, low‑carbon energy for generations to come.

Safety & Regulatory Affairs team plays a vital role in ensuring our programmes meet the highest standards of quality, nuclear governance, and regulatory compliance. We enable safe, efficient delivery by shaping the frameworks that keep our documentation accurate, traceable, and audit‑ready.

The role of security assurance is to identify Physical and Personnel Security risks and highlight non-compliance and vulnerabilities to enable others to manage residual risk.

• Deliver security assurance processes, including providing audit information to risk owners
• Monitor and report on the delivery of Physical and Personnel Security services against requirements, with the use of key performance indicators
• Ensure alignment with objectives and standards, proactively reviewing and assuring security risk and highlighting non-conformance

Applied Physical and/or Personnel Security

Develops and applies new concepts in Security, involving the other specialisms/enablers, with an emphasis on creating new or adapting exist audit activity Promotes Physical and Personnel Security as a business enabler throughout the organisation, through the identification of vulnerabilities and recommendations to remove or mitigate these to improve business processes. Engages with the UK security community

Legal & Regulatory environment and compliance

Advises others on the principal requirements of major legislation and regulations relevant to security, and the legal and regulatory instruments relevant to the role. Provides oversight of the range of regulations that impact the security function and the interactions between them. Reports residual non-compliance to senior management in accordance with organisational procedures.

Risk Understanding and Mitigation

Assists in the development of risk management plans based on findings from security audit activity, enabling the organisation to deliver balanced and cost–effective risk management decisions. Assists business risk assessment and mitigation plan development. Ensures that risk is embedded into security governance processes and activities.

Protective Security

Maintains an up-to-date understanding of fundamentals of all areas of security and appreciates the importance of making use of a combination and multi-layering of appropriate and proportionate Physical and Personnel Security measures to protect assets. Promotes protective security, providing advice to others.

Threat Understanding

Describes specific threats and how they may manifest themselves in a local environment. Maintains understanding of local threat environment and can apply to inform and provide context for wider activities. Uses local threat information in decision-making and planning. Demonstrates knowledge of current threats and trends affecting the landscape.

• Relevant industry qualifications and accreditations, e.g. ISO
  27001 Auditing, Physical or Personnel Security Professional, Certified Information Systems Auditor etc
• Relevant security qualifications and accreditations
• Knowledge of Nuclear Industry Security regulation or similar highly regulated industry, such as, aerospace, MOD etc
• Willing to travel to undertake audit activities in person.

The successful candidate must be prepared and able to travel to locations inside and outside the UK to undertake assurance…