Location
About the job
Job summary
Do you want to support the Department to protect its assets and deliver an effective physical security capability across a vast estate?
This is your opportunity to make a real difference and be involved in work that informs strategic direction, helps us manage physical security risk and drive continuous improvement in this area across DWP.
We are looking for enthusiastic candidates to become part of an exciting and growing area of work, with real opportunity to learn and grow.
This is a key role supporting DWP.
You’ll provide internal impartial subject matter expert support to Senior Leaders, service owners, stakeholders and Arm’s Length Bodies.
You’ll need to be willing to travel to other DWP locations across the UK, with occasional overnight stays required.
Job description
The DWP Physical Risk and Security Team (PRST) provides 1st line physical security support to the DWP and its Arm’s Length Bodies. Delivering physical security risk management, controls assessment and expert partnering, Physical Risk and Security Team support the Department in the protection of its people, customers, buildings and assets and delivery of an effective physical risk and security capability.
About the role
The Senior Physical Risk and Security Specialist provides leadership and management to the Physical Risk and Security Team, enabling the delivery of physical security services, insight and expertise to DWP business areas and its Arms Length Bodies (ALB’s).
Engaging with stakeholders across the business, security profession and wider HMG, the Senior Physical Risk and Security Specialist ensures services align to business priorities and internal, cross-government and industry standards, proportionally mitigating the Department’s physical security threat profile.
The roles and responsibilities include, but are not restricted to the following:
- Lead by example, visibly and confidently engaging colleagues and stakeholders to support and deliver an effective physical risk and security capability
- Support a strong DWP physical security profession and identity, ensuring alignment with the Government Security function and profession
- Undertake a pro-active risk-based approach to physical security
- Manage Physical Risk and Security Team activities and performance (including line management) to support delivery of an effective, visible and respected Physical Security service to DWP, its ALBs and external customers
- Provide practical physical security input, prioritising actions to ensure relevant risks and issues are quickly and efficiently resolved. Where required, identify and support the escalation of physical security risks through relevant Departmental governance routes
- Lead and contribute to an environment of systematic continuous improvement of DWP’s physical security, supporting its increasing maturity across the Department
Person specification
Essential Criteria
You must have previous evidenced experience in security roles, although training will be available. The right candidate for this role will be able to demonstrate the essential criteria listed below:
- Demonstrable knowledge and experience of physical security threat assessments and risk analysis, and the identification, implementation, and ongoing evaluation of security measures
- Proven experience of good relationship management
- Proven experience of business process analysis
- Proven analytical experience, including a strong knowledge of supporting software and analytical tools, such as MS Excel, to analyse and present findings
- Knowledge of physical security practices, controls and standards. Should have, or be willing to acquire, in role knowledge of His Majesty’s Government (HMG) physical security policies and standards.
Desirable qualifications
- Physical Security
- ASIS Certified Physical Security Professional (PSP) or Certified Protection Professional (CPP)
- Information Security
- ISO27001 Lead Implementer
- NIST Security Framework Foundation Course
- BCS Certificate in Information Security Management Principles (CISMP)
- Risk Management Level 4
- ISO 27005 Risk Management Practitioner
(…or equivalent qualification, knowledge and/or experience of physical, technical and environmental security controls, information security management, information risk, people controls, software development/lifecycle, and disaster recovery)
Desirable past experience and skills includes but is not limited to:
Experience of security management and analysis of physical security threats and risks
Good understanding of all security controls (technical, procedural, personnel and physical)
Experience of information security management systems and risk assessment methodologies
For jobs location in Wales, the ability to speak Welsh is desirable.
Behaviours
We’ll assess you against these behaviours during the selection process:
- Leadership
- Making Effective Decisions
- Seeing the Big Picture
Technical skills
We’ll assess you against these technical skills during the selection process:
- Security Risk Management
- Communicating and knowledge sharing
Benefits
- Learning and development tailored to your role
- An environment with flexible working options
- A culture encouraging inclusion and diversity
- A Civil Service pension with an average employer contribution of 27%
- A minimum of 25 days annual leave (plus public and privilege leave)