Security Compliance Policy Associate

The Office for National Statistics (ONS) is the UK’s largest producer of official statistics, covering a range of key economic, social and demographic topics. These include measuring changes in the value of the UK economy, estimating the size, geographic distribution and characteristics of the population, and providing indicators of price inflation, employment, earnings, crime and migration.

Security and Information Management (SaIM) directorate operates five key services across ONS: Security Risk Advice and Management; Knowledge and Information Management (KIM); Physical Security and Business Continuity; Security Development, Compliance and Audit; and Cyber Security, including our Partnering Services.

This Security Compliance Policy Associate role sits within the Security Development, Compliance and Audit (SDCA) team which forms part of the Security and Information Management (SaIM) directorate. The SDCA team provides an advice service to stakeholders for the complete lifecycle, security and governance of sensitive information stored within data access environments. The SDCA team also acts as an interface between stakeholders to deliver data protection assurance, monitor compliance with security policies and principles as well as provide evidence to stakeholders in support of these functions.

The primary focus of this role is the implementation of data protection assurance and audit capabilities within the Security Compliance team, in line with clearly defined security strategy and data protection standards. This also includes advising internal users, stakeholders and Information Asset Owners on compliance and risk associated with use of data.

You may be expected to identify and assess the risk(s) associated with the event / incident, raise awareness, and ensure appropriate steps are taken to record and manage any associated risks. Or you may assist planning and conducting audit. You will escalate any concerns/risks to the senior managment.

Responsibilities

• Support Compliance Policy Lead in developing and implementing effective data protection assurance processes and compliance documentation (e.g. DPIAs, SyOPs, etc.) to meet regulatory and legal requirements.
• Support in developing and implementing effective auditing and monitoring capability for data systems and data use which incorporates advice from Security and industry best practice.
• Establishing understanding of the nature, scope, context, purposes, and risk of data processing by different business areas to provide comprehensive guidance and effective oversight of compliance.
• Support in developing and promoting effective training, engagement, and awareness-raising activities to promote data protection and compliance best practice.
• Assisting with the investigation of non-compliance incidents and breaches and taking actions as directed.
• Supports Asset, Security, Information Management and Account responsibilities for the use of all ROSA assets in ONS possession.

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.

Security Clearance

For ONS the requirement for SC clearance is to have been present in the UK for 3 consecutive years immediately prior to applying and the department will consider eligibility by exception on a case-by-case basis. You will be asked to provide information regarding your UK residency during your application, and failure to provide this will result in your application being rejected.

At the point of SC application, you will need to provide or give access to the following evidence:

• Departmental or company records (personnel files, staff reports, sick leave reports and security records)
• UK criminal records covering both spent and unspent criminal records
• Your credit and financial history with a credit reference agency
• Security Services records

Please note: We will reach out to you once the advert has closed to confirm eligibility for this role, this will be via an e-mail. Please check you e-mails.

Visa Sponsorship

ONS are unable to offer visa sponsorship for this role. Applicants are expected to hold a valid right to work in the UK when employment commences. If you are applying on a time-limited visa, this will need to be valid for at least 18 months at point of application.

Right to Work and Nationality Requirements

To work at the ONS, candidates must meet both UK right to work and security clearance requirements (where applicable).

If you are unsure whether you meet the appropriate right to work or security clearance eligibility criteria, please refer to the guidance on Gov.uk or contact the recruitment email provided in the advert before applying. Failure to meet these requirements will result in your application being rejected and employment offers being withdrawn.

Application Process

Number of Stages: 2 stage process

Stage 1: Application

Stage 2: Interview

Stage 1 – Application

The assessment process at the application stage will be based on your work history, CV, skills, experience, and personal statement. It is important that your application is tailored to highlight the skills, knowledge, and experience relevant to the role.

A personal statement is required at application stage, the maximum word count allowed is 1250 words, which should not be exceeded. You should provide evidence for each essential skill criterion listed in the person specification. As these criteria are scored, it is advisable to give clear examples for each one, including the impact of your actions, ideally utilising the STAR technique (Situation, Task, Action, Result).

In instances where a high number of applications are received, the sift pass mark may be adjusted, and candidates will be invited to interview based on merit order, i.e., those with the highest scores.

When a high volume of applications are received, the sift pass mark may be adjusted. Candidates will be invited to interview based on their merit order, with those achieving the highest scores being prioritised. Applicants who score below the adjusted pass mark but still pass will be placed on hold and may be invited to interview at a later date.

Please note that Success Profiles Behaviour examples are not required at this stage of the application process.

Stage 2 – Interview

If invited to interview, you will be assessed using techniques aligned with the Civil Service Success Profiles framework, covering all behaviours listed in the job advert.

Interviews will be in via Microsoft Teams.

A reserve list may be held for a period up to 12 months from which further appointments may be made.

Important Dates

• Eligibility checks from 30/10 - 06/11. Please be aware we will be sending all candidates an e-mail to complete a eligibility form.
• Sift will be conducted from 09/11/2026
• Interviews will be from 01/12/2026

For the full terms and conditions of the post, please see attachment.

Please note that all campaigns may be subject to withdrawal at any stage if the internal resource position changes.

Feedback will only be provided if you attend an interview or assessment.