Senior Security Manager (Supply Chain Security)

Job summary

Companies House plays a vital role in the UK economy by enabling transparency, supporting business confidence, and helping to tackle economic crime. As our digital services evolve, so does the complexity of our supply chain. We rely on a wide range of suppliers, partners, and third-party providers to deliver critical systems and services. We are looking for a Senior Security Manager – Supply Chain Security to lead how we manage and reduce risks across that ecosystem.

This is a high-impact, strategic role where you will own and develop the organisation’s Supply Chain Risk Management (SCRM) capability.

• You will ensure that risks arising from third parties are identified, assessed, and managed proportionately across the full commercial lifecycle—from procurement and onboarding through to contract management and offboarding.
• A key part of the role is working closely with Commercial, Legal, and Service Teams to ensure that security is embedded into government procurement processes, with a strong understanding of how to apply security requirements through contractual mechanisms.

About Companies House

Companies House holds one of the largest sources of data in the UK, supporting transparency, economic research and public trust. As we continue to evolve through legislative reform, the need for well-governed, trusted and clearly defined data has never been more important.

Why choose Companies House?

We take a proactive approach to wellbeing, promoting a welcoming culture and healthy work-life balance.

Our benefits include:

• Flexible working with no core hours (between 6am and 8pm)
• 30 days annual leave, plus bank holidays
• Civil Service Pension scheme, with an average employer contribution of 28%
• A strong focus on career development and progression

Find out more about what a great place Companies House is to work

Job description

Please note

• You will be based at either our Cardiff or Edinburgh office where you will be expected to attend on a regular basis.
• Companies House cannot offer Visa sponsorship to candidates through this campaign.
• Security Check (SC) Clearance is an essential requirement (you must have been present in the UK for at least 3 out of the last 5 years). Please see 'Things you need to know' section below for more information.
• We can accept applications for those looking to work full time, part time or compressed hours, a minimum of 30 hours over 4 days per week.

The successful candidate will

• Own the supply chain security risk domain for the organisation, setting direction and standards for third-party risk management
• Define and maintain the Supply Chain Risk Management (SCRM) framework, including risk classification, assurance models, and escalation thresholds
• Embed security and cyber security requirements into procurement, tenders, and contracts in collaboration with Commercial and Legal teams Lead third-party assurance activities, including onboarding assessments, audits, and ongoing compliance monitoring
• Apply and assure security requirements using government-aligned procurement approaches, including the use of Modular Security Schedules (MSS) and other contractual security artefacts
• Provide expert input into procurement strategies, ensuring proportionate security controls are defined based on risk, service criticality, and data sensitivity
• Manage aggregated and systemic supplier risk, ensuring visibility of dependencies and critical exposures
• Provide clear, authoritative reporting to senior stakeholders on supply chain risk posture and trends
• Lead and coordinate the response to third-party security incidents
• Drive continuous improvement and set the maturity roadmap for supply chain security capability

About the team

The Security Division at Companies House is responsible for protecting our people, services, data, technology, partners and reputation. Our multidisciplinary team covers cyber security, physical security, personnel security, supply chain security, resilience, business continuity, disaster recovery, data security, incident management and fraud risk management. We are a collaborative, hybrid-working team operating across Cardiff, Edinburgh and Belfast.

As a centralised security function, we provide opportunities to work across multiple security disciplines, develop new skills and contribute to some of the UK's most significant public sector transformation programmes. You'll work alongside experienced security professionals, technology specialists and business leaders to help secure services relied upon by millions of customers and businesses every year.

Person specification

We’re seeking individuals who can demonstrate

• Strong knowledge and experience of security governance, risk, and compliance (GRC)
• A proven track record in supply chain / third-party risk management
• Ability to apply and interpreting MSS or equivalent contractual security controls.
• Demonstrable capability to embed security requirements into contract, tenders and supplier agreements.
• Experience Building and maintaining effective working relationships across government procurement processes, using collaboration to achieve shared objectives and successful outcomes.
• Experience influencing and constructively challenging stakeholders across Commercial and Delivery functions to drive positive outcomes and informed decision making.
• Experience managing complex risk across multiple suppliers or services, taking timely action to ensure successful delivery and risk mitigation
• Strong analytical and problem-solving skills, with the ability to assess complex information, evaluate risks and make evidence-based decisions.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Working Together
• Delivering at Pace
• Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

• Strong knowledge and experience of security governance, risk, and compliance (GRC)
• A proven track record in supply chain / third-party risk management.

Benefits

Alongside your salary of £58,531, Companies House contributes £16,956 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

We believe that our success is driven by the well-being and satisfaction of our team members at all levels of the organisation. At Companies House we’re committed to providing a comprehensive benefits package that goes beyond the ordinary, ensuring your career journey with us is not only fulfilling, but also rewarding. We pride ourselves on offering a quality work-life balance with our employee wellbeing being central to our working practices.

Head to Our benefits - Working for us - Recruitment (companieshouse.gov.uk) to find out more about the fantastic benefits package we have at Companies House.

We celebrate diversity...

As an equal opportunity employer, we celebrate dive