Deputy Security Manager

We are recruiting for a Deputy Security Controller for two new major projects in Gloucester and Cirencester in our Public Sector team as part of our DEOP (Defence Estates Optimisation Portfolio) programme.

The Deputy Security Controller is the point of contact for all security matters on a project including physical, personnel, information and asset security. The role is pivotal in ensuring Bovis are compliant with UK government legislation.

It is a flexible role, primarily site based, but will also requires travel to sites, supplier offices and other locations where UK Government assets that are associated with a Bovis Project are located.

The role entails all aspects of managing security controls for government projects, it’s a hands-on role and you will be working closely with Bovis site management as well as with other internal and external specialists including information technology, consultants and suppliers to implement the operational aspects of the Security Management Strategy.

Key responsibilities:

• Ensuring that Bovis remain compliant with UK Government security standards and contract requirements, including but not limited to GovS007, MOD DEFCONs and DEFSTANs, departmental standards and specific contract clauses appropriate to the information management environment and projects that you are working on.
• Review of Security Aspects Letters (SALs), lead on project security planning and development of project specific Security Management Plans (SMP) aligned to the above government standards.
• Supporting the management and maintenance of security policies and procedures, working closely with stakeholders to maintain required certifications.
• Ensuring projects that you are working on follow Bovis policy, process, systems and procedures to ensure information we receive, hold and create is handled correctly and securely in line with the risks we face.
• Manage the secure handling, transfer, destruction, and reporting of classified materials. Implementing and supporting the correct registration, issuing, storage, mustering and destruction of classified assets
• Training and awareness for our people, Consultants and Trade Contractors and any party that we interact with that needs to know to deliver their service to us.
• During delivery, direct sub-contractors in aspects of Security Management while on site.
• Providing subject matter advice, guidance and support in all aspects of Security Risk Management including Threat and Intelligence analysis; Personnel Security; Physical Security; Technical security; Information Security; Travel Security Risk Management.
• Incident management and investigations into security breaches, incidents and near misses, reporting and escalating in line with any process or system agreed with clients.
• Conducting audits and reporting on the status of both information and physical assets related to the projects you are working on, including supplier office visits and factory visits as needed. Implementing lessons learnt, providing briefings and training to improve Bovis security posture.
• Where needed manage and maintain any Facility that falls under the FSC (Facilities Security Clearance) Policy.

Essential credentials:

• DISA Security Controller certification (or willingness to obtain it).
• UK National
• In-depth knowledge of UK security regulations, standards and frameworks including:
• GovS007
• JSP 440
• NIS Regulations
• Official Secrets Act
• UK GDPR
• National Security Vetting processes
• NVQ Level 3 or higher qualification in Information Security (or equivalent).
• Proven experience delivering information security controls and assurance.
• Full UK Driving Licence.

Desirable credentials:

• SMSTS or SSSTS qualification.
• DISA IPSA course.
• DISA IT and Cyber Security course.
• IT/Cyber-related qualification or demonstrable experience.
• Knowledge of ISO 27001 and MOD standards.
• Membership of a professional body such as:
• Security Institute
• ASIS
• DISA

Essential Skills:

• Team working ability.
• Willingness to travel.
• Stakeholder management.
• Ability to influence site teams and subcontractors.
• Ability to analyse data and develop improvement plans.
• Continuous improvement mindset.
• Ability to challenge and question evidence provided.

Desirable Skills:

• Ability to deliver technical security training.
• Ability to communicate complex security concepts to technical and non-technical audiences.
• Ability to mentor and support others in achieving security qualifications.

• Essential Knowledge:

• Knowledge of MOD Information Security standards and controls.
• Knowledge of GovS007.
• Detailed understanding of National Security Vetting processes.

Desirable Knowledge

• Understanding of the design, construction and commissioning of secure facilities and infrastructure.
• Knowledge of MOD Secure by Design Assurance processes and procedures.

Essential Experience:

• Experience as a Deputy Security Controller, Security Manager or Information Security Manager.
• Current holder of National Security Vetting clearance or willing and able to undergo vetting.
• Experience conducting document, process, system and information audits.

Desirable Experience:

• Security experience within construction projects.
• Experience working on MOD establishments with enhanced security requirements.
• Experience developing logistics and delivery strategies with construction teams.

Essential Behaviours:

• Professional conduct in challenging situations.
• Strong security-focus with attention to detail.
• Flexible and adaptable.
• Ability to work independently.

Desirable Behaviours:

• Ability to train and coach others.
• Mediation skills.

Please note that due to the nature of this role, national security vetting procedures apply, and a full UK security check will be carried out for the successful candidate. Further details about national security vetting can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk) or Vetting explained - GOV.UK (www.gov.uk)

We will provide:

• Up to 10% employer pension contribution
• Private medical health benefit
• Enhanced parental leave
• Life assurance
• 25 days annual leave with the option to buy or sell additional days
• 4 days wellbeing leave in addition to annual leave
• Health and wellbeing support and initiatives
• 24/7 confidential Employee Assistance Programme including direct access to Talking Therapies and Coaching services
• Discounted gym membership to over 2,500 gym’s nation wide
• Industry leading parental leave