Senior Company Security Controller (Security Manager)

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

AECOM is seeking a highly experienced Company Security Controller. The role will report to International Security Director. The ideal candidate would be based in Basingstoke however, location may be flexible, with the requirement to be able to attend our office at least 1-3 days/week/as needed. 

Role responsibilities: 

• Strategic guidance to key stakeholders in all matters associated with UK Government Security.
• Provide support to the end markets, ensuring AECOM is aligned to client requirements in relation to existing and new projects which may be governed by United Kingdom Government Security.
• Representing AECOM, providing project liaison, managing and developing key client relationships.
• Manage AECOM secure facilities and support project and office teams in development of new facilities.
• Be the prime point of contact for UK Government Security principles for the business units.
• Support Site Security Controllers and the UK Classified Network Manager with the management of the accredited facilities.
• Support project and office teams in development of new facilities adopting the lead role in the accreditation process of new FSC facilities.
• Understanding principles of Surreptitious Threat Mitigation Process (STaMP) and MODs Secure by Design.
• Provide advice, guidance and support on UK Government Security protocols for the business and the AECOM Executive Board.
• Understand Industrial Personnel Security Assurance (IPSA) certification and of the management of the vetting function and provide support as required.
• Support the business units with responses to security audits and questionnaires.
• Manage the Defence Cyber Protection Portal process and the dissemination of contractual obligations to the supply chain.
• Lead on Security Aspects letter processes.
• Management of the security incident report process relating to UK Government Projects and Ministry of Defence industry Warning, Advisory and Reporting Point (MOD WARP) SIRF submissions

Specific Tasks:

• Ensuring the UK legislative and company policies are adhered to.
• Support review of best practices, policies and procedures.
• Managing Security Awareness training in various formats / providing the initial and annual mandated Security Awareness training for all cleared individuals.
• Be the FSC Security Controller and the Crypto Custodian for the Basingstoke facility if feasible
• Provide support and oversight of AECOMs 5 FSC facilities and 2 List N facilities
• Manage the security vetting team that is based in Basingstoke
• Support the vetting process during periods as required by the business
• Liaising with project teams and responding to Security Aspects Letters relating to existing projects, future project pursuits and the supply chain process.
• Provide the response to, and investigating security incidents in line with AECOM protocols, ensuring that they are dealt with appropriately or escalated if necessary.
• Highlighting and escalating any government associate security risks to stakeholders via the relevant risk committee.
• Support projects in response to client business continuity questionnaires.
• Oversight and support for office ID card production.

Management/Advisory:

• Chair the company national security working group
• Provide monthly and quarterly reports to the Board Level Contact for Security
• To actively participate in professional associations and relevant peer groups
• Attend forums and training to ensure that AECOM is fully up to date with security changes adherence to List X Notice and MOD Certifications.

 

• Due to the nature of the role the person must be a sole British national with no current or former foreign nationalities.
• They will be required to achieve DV clearance without restrictions.
• Resided in the UK for the last 10 years without breaks of more than 28 days.
• Needs to have completed or is willing to complete the Defence Industry Security Association (DISA) Security Controller Course.
• Membership of the Security Institute and DISA.
• Fully conversant with MOD Joint Service Publications (JSP440), Security Policy Framework and Government Functional Standard (GovS007).
• Previous experience of managing a national security vetting function and vetting account.
• Understanding of the Catalogue of Security Equipment, STaMP assessment and the accreditation process for new FSC facilities.
• Highly developed and disciplined work ethic, sense of accountability and ability to follow through on tasks to completion.
• Communication skills are critical.
• Minimum 5 years’ relevant Company Security Controller experience.
• High level of integrity and ability to maintain confidentiality.
• Functionality in Microsoft Office products e.g., PowerPoint, Word, Excel, Outlook.

Preferred:

• ISO27001 lead auditor qualification.
• A recognised security management qualification, e.g.,• Certified Information Systems Security Professional (CISSP)
• Certified Security manager (CSM)

• Understanding of MOD Secure by design principles and historical MOD DART accreditation.

About AECOM

AECOM is the world’s trusted infrastructure consulting firm, delivering professional services throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. On projects spanning transportation, buildings, water, new energy and the environment, our public- and private-sector clients trust us to solve their most complex challenges. Our teams are driven by a common purpose to deliver a better world through our unrivaled technical and digital expertise, a culture of equity, diversity and inclusion, and a commitment to environmental, social and governance priorities. AECOM is a Fortune 500 firm and its Professional Services business had revenue of $14.4 billion in fiscal year 2023. See how we are delivering sustainable legacies for generations to come at aecom.com and @AECOM.

Freedom to Grow in a World of Opportunity 

You will have the flexibility you need to do your best work with hybrid work options. Whether you’re working from an AECOM office, remote location or at a client site, you will be working in a dynamic environment where your integrity, entrepreneurial spirit and pioneering mindset are championed.

You will help us foster a safe and respectful workplace, where we invite everyone to bring their whole selves to work using their unique talents, backgrounds and expertise to create transformational outcomes for our clients.

AECOM provides a wide array of compensation, benefits and well-being programs to meet the diverse needs of our employees and their families. We’re the world’s trusted global infrastructure firm, and we’re in this together – your growth and success are ours too.

Join us, and you’ll get all the benefits of being a part of a global, publicly traded firm – access to industry-leading technology and thinking and transformational work with big impact and work flexibility. As an Equal Opportunity Employer, we believe in each person’s potential, and we’ll help you reach yours.

We are a Disability Confident Employer and will offer an interview to applicants who have a disability or long-term condition, who meet the minimum/essential criteria for the role. Please let us know using this email address [email protected]  if you would like to apply through the Disability Confident Interview Scheme.

All your information will be kept confidential according to EEO guidelines.