Head of Security / Security Manager (Depending on experience)

Aztec West, Bristol – 3 days on-site

RC Fornax is a veteran-owned engineering consultancy delivering high-value solutions for complex, safety-critical systems in industries where reliability and precision are paramount. As we continue to grow, we are seeking a Head of Security or Security Manager (DOE) to lead our security strategy, strengthen our organisational resilience, and ensure robust compliance with UK defence and regulatory standards. This is a rare opportunity to shape the direction of our security function, driving best practice across personnel, physical, and technical security while working closely with internal teams and external agencies. As we scale, you’ll play a key role in building a resilient, modern security capability that safeguards our people, assets, and the critical work we deliver.

Responsibilities

Security Management

• Develop, implement, and maintain comprehensive security policies and procedures.
• Monitor daily security operations to ensure adherence to established protocols.
• Conduct regular risk assessments to identify and mitigate potential threats.
• Manage all security equipment maintenance and contracts.

Personnel Security

• Manage the employee security clearance process, including background checks and vetting.
• Deliver security training and awareness programs to staff.
• Maintain up-to-date records of personnel security status and access levels.
• Facilitate IPSA framework.

Facility Security

• Implement and oversee physical security measures such as access control, surveillance, and perimeter protection.
• Manage the issuance and control of security badges and access cards.
• Ensure secure transportation and storage of sensitive or classified materials.

Incident Response

• Develop and maintain incident response plans for various security scenarios.
• Lead investigations into security breaches and prepare detailed incident reports.
• Coordinate with law enforcement, IPO and emergency services during incidents.

Technical Oversight

• Oversee the implementation and effectiveness of cybersecurity measures across the organisation.
• Ensure appropriate access controls are in place, including identity management and authentication protocols.
• Maintain oversight on system vulnerabilities and remediation efforts.
• Co-ordinate with MSP to ensure timely updates, patching and maintenance.
• Provide strategic guidance on the selection and deployment of security technologies.

Compliance and Audits

• Perform internal security audits and inspections to ensure operational integrity.
• Prepare documentation and reports for external audits and regulatory reviews.
• Ensure all security measures comply with FSC and other relevant standards.
• Prepare for Defence Cyber Certification Level 1 and supply chain security.
• Continue roll out of Zero Trust cyber security model.

Liaison and Communication

• Act as the primary liaison with external agencies and internal departments on security matters.
• Communicate security policies, updates, and alerts to all relevant stakeholders.
• Participate in security briefings, meetings, and inter-agency coordination efforts.

We are looking for:

• 7+ years working in security and resilience.
• DISA Security Controller Course
• DISA Vetting Course
• ASIS CPP/PSP
• In-depth knowledge of relevant UK security regulations, standards, and frameworks (e.g., JSP 440, Secure by Design, Cyber Assurance Framework, Official Secrets Act, UK GDPR, national security clearance processes - SC/DV).
• CompTIA Security+, CompTIA Cybersecurity Analyst+, or similar, CISM or CISSP would be an advantage

Due to the sensitive nature of the work, this role requires a UK security clearance at SC minimum.