Physical and Digital Security Manager

Salary and Employment Details

• Salary: £80,000 DOE
• Full Time
• Permanent

Sub Sea Craft is a fast growing, privately-funded, UK-based innovative maritime technology company specialising in next-generation, high-performance watercraft and systems. We operate at the intersection of advanced engineering, cutting-edge design, and user-centric innovation, delivering safe, effective, and enabling solutions for both commercial and defence applications.

• Pension Contribution – Pension scheme with the option to contribute via salary sacrifice.
• Annual Bonus Scheme – Eligibility to participate in the company’s annual discretionary bonus scheme, linked to individual and company performance.
• Life Assurance and Critical Illness Cover – Comprehensive protection including Life Assurance (4x salary) and Critical Illness Coverage.
• Annual Leave – 25 days of annual leave plus bank holidays.
• Christmas Leave – A Christmas shutdown is typically observed.
• Wellbeing Day – An additional Wellbeing Day each year to focus on personal health and wellbeing.
• Family Leave – Enhanced maternity and paternity pay.
• Private Healthcare – Access to comprehensive private healthcare coverage to support physical and mental wellbeing.
• Professional Development – Commitment to ongoing learning and career growth, supported by training programmes and access to Linked In Learning.
• Flexible Working – Opportunities for flexible working arrangements to promote work–life balance.
• Inclusive Culture – A professional environment that values diversity, innovation, and collaboration.

The Physical and Digital Security Manager is responsible for developing, implementing and continuously improving the organisation’s protective, physical, information and cyber security arrangements, ensuring security risks are effectively managed in support of business objectives, contractual obligations and regulatory requirements.

The role provides leadership across physical security, information security governance, cyber resilience and personnel security, including oversight of the Information Security Management System (ISMS), management of security risks and incidents, and assurance that appropriate controls are in place to protect people, assets, information and operations.

The role acts as the company’s subject matter lead for security matters, working cross-functionally with internal stakeholders, external partners and relevant authorities to support a robust and proportionate security posture across the organisation.

• Security Strategy and Governance – develop and implement the organisation’s security strategy, policies and procedures aligned to business objectives, risk appetite and legal, regulatory and contractual obligations.
• Risk Management – lead identification, assessment and treatment of risks across physical, personnel, information and cyber security domains.
• Physical and Protective Security – maintain and continuously improve the integrity of physical security arrangements across company facilities, assets and operations.
• Information Security Management – implement, manage and continuously improve the organisation’s Information Security Management System (ISMS), ensuring security policies and procedures are maintained, communicated and embedded.
• Cyber Security – conduct vulnerability, threat and risk assessments, ensuring appropriate mitigation measures are implemented to address identified cyber threats and weaknesses.
• Technology Security Oversight – oversee the security of the technological estate, including security assurance and oversight of internal IT team, outsourced IT and managed service providers.
• Personnel Security and Vetting – manage personnel security vetting activities, including sponsorship, submissions, renewals and liaison with United Kingdom Security Vetting where required.
• Third-Party and Supply Chain Security – evaluate and assure suppliers and third parties against security requirements and contractual obligations.
• Incident Response and Resilience – lead and coordinate response to security incidents, including containment, investigation, recovery and lessons learned.
• Project and Change Support – provide…