Assistant Manager, Security Advice, Project Assurance and Facility Management, QRS

Are you an experienced security professional who can be at the forefront of assuring Deloitte are compliant with the principles embedded within relevant Government standards? Are you ready to contribute your expertise to the highest levels of security advice, providing recommendations for controls, processes, and protocols in all aspects of physical, personnel and information security?

We are seeking a Security Specialist to join our team within Deloitte Business Security (DBS), who are part of the Deloitte Quality, Risk and Security (QRS) community. Quality, Risk and Security (QRS) is an overarching identity for all the professionals who manage quality and risk for Deloitte. It comprises: Deloitte Business Security (DBS), National Quality and Risk Management (NQRM), Quality & Risk Operations (QR Ops), and Service Line Quality and Risk Management teams (including Switzerland) and is led by a dedicated partner who sits on the firm's Executive.

Within QRS, we use our skills and experience across a variety of disciplines to support a risk intelligent culture at Deloitte; enabling our partners and practitioners to deliver high quality services to their clients, minimising the administrative burden on our people, and acting as custodians of firm risk, security, ethics, and reputation.

This role is part of a growing team, and a tremendous opportunity to contribute to a developing function with direct impact for its operational growth. You’ll be responsible for supporting the Security Manager and Security Controller with security operations, assurance, and administration. The key tasks will include:

• Working with our Defence Security and Justice Account, you will build and maintain strong business relationships throughout.
• Working predominantly on site to provide security advice and support to Deloitte staff, ensuring our continued compliance with Client processes.
• Ensuring compliance with the firm’s security policy framework and observance of principles outlined in government regulations and standards i.e. HMG SPF, Functional standards GovS007.
• Delivering the efficient and effective co‑ordination and execution of security operations in the areas of physical, material, document, personnel, and information security.
• Implementing policies and processes in accordance with corporate governance in relation to security, providing reports clearly defining outcomes and recommendations.
• Ensuring HMG accreditations remain valid, by undertaking any security related tasking issued by the Security Manager and Security Controller.
• Support the Security Controller in the delivery of the security roadmap, strategies, and future initiatives, ensuring all reviews and work streams are completed to agreed timescales and adequate standard.
• Providing security and risk management advice for Deloitte practitioners working across government and public services.
• Report all suspected security breaches and if required, carry out thorough investigations of any suspected security breaches making recommendations for appropriate actions.
• Develop, implement and monitor physical and information asset security controls, acting as custodian for security related material.
• Maintain and manage the Protected Document Register (PDR) and Government Security Classified (GSC) materiel held by the Government & Public Services Security Team.
• Escalate security issues directly to the Security Manager in the first instance, ensuring communications are controlled and managed accordingly.
• Oversee and coordinate the technical programming of access passes, ensuring the adherence of relevant policy.
• Promote awareness of the latest HMG and Deloitte security requirements, conduct security education and culture training, including induction, continuation training and off‑boarding.
• Act as the primary point of contact for facility users for room bookings, functionality, appropriate use, access, faults and facility maintenance.
• Provide security education and training, including briefings to new joiners and refresher training as appropriate.

Essential:

• Working knowledge of HMG Security Policy Framework (SPF) and Functional Standard GovS007 and the Official Secrets Act (OSA).
• Ability to handle security material effectively, ideally including cryptographic material.
• Excellent interpersonal communication skills, both written and verbal.
• Strong IT skills - Microsoft 365 products, applications, and services.
• Currently hold Developed Vetting (DV) clearance.

Desirable:

• Experience in government or other regulated industry, specifically security supervision/assurance.
• DISA training e.g. Role of the Security Controller, security vetting.
• Formal security qualification e.g. L3 Security management and above, CISM.

You’ll be based in London with hybrid working. At Deloitte we understand the importance of balancing your career alongside your home life. That’s why we’ll support you to work flexibly through our hybrid working policy. Depending on the requirements of your role, you’ll have the opportunity to work in your local office, virtual collaboration spaces, client sites and remotely.

Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.