Job Description:

Defence Information Security Manager (DISM) 

Flexible / national, with regular UK site travel and occasional overseas travel as required

Permanent 

Summary 

We're seeking a Defence Information Security Manager (DISM) to manage and provide day-to-day assurance across information, personnel, physical and protective security within the IT Services Defence Sector. You'll ensure compliance with MOD, government, contractual, NG Bailey and ISO/IEC 27001 requirements while providing expert security assurance, driving best practice and supporting the secure delivery of Defence contracts. As the sector's key security contact, you'll work closely with customers, operational teams and internal stakeholders, conduct site audits and assessments, manage security incidents, and support the continual improvement of security compliance and assurance processes. 

Key deliverables for the role include: 

• Demonstrate strong Health and Safety leadership by planning and conducting site visits and audits in line with NG Bailey requirements, ensuring personal safety, site access compliance and operational considerations are effectively managed.
• Promote a strong security culture by providing expert guidance and challenge to leaders, managers and project teams, ensuring employees understand and meet their security responsibilities and contractual obligations. 
• Develop, maintain and continually improve Defence Security policies, procedures and documentation, ensuring they remain compliant, risk-based and auditable, and aligned to contractual, operational and threat landscape changes.
• Provide security assurance and expertise for bids, contract mobilisations, operational changes, new sites and evolving customer requirements, ensuring appropriate security controls are implemented and maintained.
• Plan and deliver a risk-based programme of security audits and assurance visits across Defence sites, assessing security controls, supporting internal and external audits and driving corrective actions through to successful resolution.
• Undertake security risk assessments and provide expert advice on risk mitigation, compliance and security improvements, escalating significant risks and recommending proportionate solutions to support informed decision-making.
• Deliver engaging security training, briefings and awareness programmes, ensuring Defence personnel understand their security responsibilities and remain informed of relevant policies, risks and security requirements.
• Support Personnel Security and vetting processes by providing guidance on clearance requirements, onboarding and offboarding activities, and ensuring security-related information is managed compliantly and securely. 
• Operate and maintain the Defence Security Compliance Register processes, ensuring that records, evidence, actions and status information remain accurate, current and compliant. Develop the knowledge and competence required to support any future controlled transfer of system responsibilities following a structured handover, while working within agreed system ownership and change-control arrangements. 
• Coordinate and support the effective management of security incidents, ensuring timely reporting, investigation, escalation, corrective action and continuous improvement across the Defence Sector. 
• Act as the primary day-to-day Defence Sector security contact, building effective relationships with customers and internal stakeholders, providing security reporting and assurance, and escalating significant risks and compliance matters.
• Maintain expertise in MOD, government, contractual and ISO/IEC 27001 security requirements, applying emerging threats, policy changes and industry guidance to strengthen Defence Sector security and compliance.  
• Maintain awareness of Facility Security Clearance requirements and, when needed, support Facility Security Controller responsibilities. 

What we're looking for 

• Proven experience in protective, personnel, physical or information security within Defence, government, critical infrastructure or another sensitive environment. 
• Working knowledge of personnel security, BPSS and national security vetting processes. 
• Working knowledge of ISO/IEC 27001 and its application to operational and Defence environments. 
• Experience developing policies and procedures, planning and conducting audits, security reviews or risk assessments, and producing clear written findings. 
• Ability to analyse complex information, maintain accurate records and manage multiple actions to completion.
• High levels of discretion, integrity, self-motivation and organisation. 
• Full competence and confidence in using Microsoft 365 applications as part of day-to-day business operations. 

Security clearance and continued eligibility 

• The successful candidate must be willing and able to undertake Security Check (SC) clearance. Appointment to, and continued employment in, the role is subject to obtaining and maintaining the level of security clearance and any customer or role-specific access approvals required for the position.  

Desirable 

• Experience supporting MOD, Defence supplier or secure government contracts.
• Familiarity with Government Security Function requirements, GovS 007, MOD Industry Security Notices, contractual Security Aspects Letters and Defence assurance processes.
• ISO/IEC 27001 Lead Auditor, Lead Implementer or equivalent audit/assurance experience.
• Experience supporting security incidents and formal reporting routes.
• Experience with automated compliance registers, workflow tools or data-driven assurance processes.
• Experience delivering security inductions, toolbox talks or awareness programmes.
• Awareness of Facility Security Clearance arrangements and Facility Security Controller responsibilities.
• Relevant security, audit, risk or information security qualification is desirable. Equivalent demonstrable experience will be considered.
• Full UK driving capability and willingness to travel regularly within the UK and, where required, overseas, including occasional short-notice travel. 

Next Steps: 

As a business, we’re on a journey to build on our culture where everyone is included, treated fairly and with respect. This starts with recruitment and how we bring people into the organisation.  

We’ll do our best to outline the recruitment process to you ahead of time with plenty of notice. If you require any accommodations to participate in the application or interview process, please let us know and we will work with you to ensure your needs are met. 

About Us: 

We are one of the leading independent engineering and services businesses in the UK. Founded in 1921, with a turnover of £500m and 3000 employees, we are proud of our history of developing great people through our investment in training. 

Working across a variety of sectors within the building and infrastructure industry, our innovative, responsible and forward-thinking approach allows us to work on fantastic ground-breaking projects, providing solutions using the latest tools and technologies. 

Progression is something we value, and we will make sure that when you join us you have a clearly defined development path, supported by regular reviews, training and ongoing support to enable you to be the best you can be. 

#LI-LP1
#LI-hybrid