Security Assurance Officer

Experience in the following areas would be advantageous:

• Relevant industry qualifications and accreditations, e.g. ISO27001 Auditing, Physical or Personnel Security Professional, Certified Information Systems Auditor etc

• Relevant security qualifications and accreditations

• Knowledge of Nuclear Industry Security regulation or similar highly regulated industry, such as, aerospace, MOD etc

• Willing to travel to undertake audit activities in person.

The successful candidate must be prepared and able to travel to locations inside and outside the UK to undertake assurance activities

A salary between £42,000 - £55,150, £2,200 benefit allowance, 12.5% bonus opportunity, 6x pensionable life assurance, 50% income protection, 28 days' holiday plus bank holidays, and a £250 new‑joiner payment-alongside opportunities for development and progression.

Role: Security Assurance Officer

·Deliver security assurance processes, including providing audit information to risk owners

·Monitor and report on the delivery of Physical and Personnel Security services against requirements, with the use of key performance indicators

·Ensure alignment with objectives and standards, proactively reviewing and assuring security risk and highlighting non-conformance

Applied Physical and/or Personnel Security

• Develops and applies new concepts in Security, involving the other specialisms/enablers, with an emphasis on creating new or adapting exist audit activity
• Promotes Physical and Personnel Security as a business enabler throughout the organisation, through the identification of vulnerabilities and recommendations to remove or mitigate these to improve business processes.
• Engages with the UK security community

Legal & Regulatory environment and compliance

• Advises others on the principal requirements of major legislation and regulations relevant to security, and the legal and regulatory instruments relevant to the role.
• Provides oversight of the range of regulations that impact the security function and the interactions between them.
• Reports residual non-compliance to senior management in accordance with organisational procedures.

Risk Understanding and Mitigation

• Assists in the development of risk management plans based on findings from security audit activity, enabling the organisation to deliver balanced and cost-effective risk management decisions.
• Assists business risk assessment and mitigation plan development.
• Ensures that risk is embedded into security governance processes and activities.

Protective Security

• Maintains an up-to-date understanding of fundamentals of all areas of security and appreciates the importance of making use of a combination and multi-layering of appropriate and proportionate Physical and Personnel Security measures to protect assets.
• Promotes protective security, providing advice to others.

Threat Understanding

• Describes specific threats and how they may manifest themselves in a local environment.
• Maintains understanding of local threat environment and can apply to inform and provide context for wider activities.
• Uses local threat information in decision-making and planning.
• Demonstrates knowledge of current threats and trends affecting the landscape.

Location: Hybrid, based from one of our offices in Derby, Manchester or Warrington

This role can be based in Derby, Manchester or Warrington, with flexibility to work between home and the office depending on business needs. There may be some international travel required on an adhoc basis.

The role of security assurance is to identify Physical and Personnel Security risks and highlight non-compliance and vulnerabilities to enable others to manage residual risk.

-

£