Risk & Compliance Manager (Defence)
NCC
Bristol based with hybrid working
Salary: £45,084 to £55,435 plus 12.5% employer pension, private medical insurance and additional benefits package.
Government Security Clearance: to the nature of our business, all employment is subject to satisfactory references being obtained alongside a level of government security clearance.
NCC is at the forefront of the composites revolution. We’re accelerating exciting and innovative new technologies and working with industry to make the future of light-weighting materials a reality.
We're undergoing a period of intense growth as we diversify our offering to industry. We're taking composites where they've never been before, innovating in fresh sectors and delivering the future of new technologies to some exciting new customers.
But any world-leading engineering company needs Risk & Compliance Managers to ensure we are managing our risks appropriately. This is where you come in.
You’ll have the responsibility for ensuring that all operational risk with respect to secure operations is documented, mitigated and communicated accordingly. You’ll also ensure that all relevant security standards and governance with respect to the NCC’s secure operations are being met satisfactorily, and that internal audits are sufficiently documented and reported. Typical role duties will include:
- Security risk management
- Business continuity
- Oversight of security governance (including Secure by Design)
- Auditing of secure operations (including policy, processes and supply chain)
- Oversight and audit of asset and material inventory
Specific Responsibilities for each area could include:
- Document key Security Roles, Terms of Reference and competency records
- Reporting security performance to external committees or bodies, where necessary
- Maintain oversight of Secure by Design, ensuring that correct governance is observed
- Develop and instigate the NCC’s security risk management framework
- Document security risks which may impact NCC, and report these accordingly to operational stakeholders, Senior Leadership Team (SLT), and external committees
- Develop and instigate NCC’s business continuity plans, ensuring alignment with emergency management plans and back-up and recovery plans
- Conduct annual business continuity exercises
- Organise specialist security response drills
- Develop and instigate a programme of internal auditing
- Oversee that correct procedures are followed for the inventory of accountable materials
- Regularly report the accountancy of materials, as required, to relevant external bodies
Please refer to job description for complete list.
What are we looking for?
- Extensive experience in risk management, internal audit and compliance roles.
- Previous experience in business continuity planning.
- Willing and able to undergo a high level of government security clearance
- Desirable: Knowledge of security standards, including FSC, IPSA, DEFSTAN 05-138, JSPs
- Desirable: Knowledge of Secure by Design methodology
- Desirable: Knowledge of radiation management systems and standards
In terms of personal skills we will want to understand when we meet you, we’ll look for strong stakeholder management skills, good interpersonal skills and good written/verbal communication.
What do we offer in return?
Hybrid and flexible working patterns as standard, annual salary reviews, company paid private medical insurance, up to 12.5% employer pension contribution, great people, honorary staff status at the University of Bristol. With a genuine focus on wellbeing, EDI and learning and development this is a chance to build your career in a thriving R&D facility with a bright future.