Occupations and Terms of Reference › Security manager
Universal terms of reference · POS-215 · version 1.0 · status: draft · next review 2027-10-27
Security manager
To keep people, buildings and property safe, so that patients, staff and visitors are protected and security incidents are prevented or handled well.
Each part of this page links to the related trainings, competencies and policies. The links are the same for every facility, so an organisation can see at a glance what a role requires and what it is trained in.
Job description
Job summary. You lead security. You plan security cover, manage access and CCTV, handle incidents and violence, and work with the police and local authorities when needed.
Reports to: Facilities manager.
Leads or supervises: Security supervisors and their teams.
What you do on a typical day
- Review security incidents and patterns each week.
- Plan security cover and rotas.
- Check access and CCTV arrangements.
- Lead responses to violent or threatening incidents.
- Report security performance each month.
Working conditions and demands
- Works with distressed and sometimes aggressive people.
- On call for serious incidents.
- Works with police and external agencies.
What good looks like
- Incidents are handled safely and recorded.
- Security cover matches risk.
- Staff feel safe at work.
Place in the organogram
Reporting line, from the top: see the organogram on the Occupations page. The lines above and below this role are listed in section 3.
1. Golden rules
These rules apply in every setting.
- Services are provided safely, on time and with no shortcuts that put patients or staff at risk.
- Supplies, equipment and systems are fit for purpose before use and are checked regularly.
- Money, stock and data are handled with integrity and recorded fully.
- Every incident or near miss is reported, and learning is shared.
- Staff are trained for their task before they work alone.
- Contractors and suppliers meet the same standards as staff.
- Concerns are raised and investigated without reprisal.
- Support functions are judged by how well they help clinical services deliver safe care.
2. Identification
| Item | Detail |
|---|---|
| Position code | POS-215 |
| ISCO-08 | 1349 (skill level 4) |
| ESCO | to map |
| Department | Security |
| Facility types | Hospital, Ambulatory, Transport, Medevac, Fitness, Aesthetic |
3. Reporting line and working relationships
Reports to: POS-178. Supervises: POS-216.
| Works with | Nature of the relationship |
|---|---|
| Facilities manager | Building security and maintenance. |
| Risk manager | Security risk entries. |
| Emergency and major incident lead | Emergency response. |
4. Key accountabilities
| Domain | Accountability | Evidence of delivery | Checked | Linked competencies | Linked trainings | Linked policies | Standards |
|---|---|---|---|---|---|---|---|
| Security plan | Keeps the security plan current and tested. | Plan reviewed yearly; exercises done | Annually | C-01 | T-07 | POL-SAFEG | 2 |
| Incidents | Leads responses to security and violence incidents. | Incidents reviewed within 24 hours | Monthly | C-02 | T-07 | POL-INC · POL-SAFEG | 2 |
| Access and CCTV | Makes sure access control and CCTV are used lawfully. | Access and CCTV audits passed | Quarterly | C-03 | T-04 | POL-DATA | 2 |
5. Decision rights
| The post holder decides | Consults or escalates |
|---|---|
| Security cover within the approved plan | Serious violence or threats to life (facilities manager and emergency lead) |
| Immediate response measures | CCTV use beyond policy (data protection officer and CEO) |
6. Qualifications and experience
| ID | Qualification | Mandatory | Validity |
|---|---|---|---|
| Q-01 | Security management certificate | Yes | Lifetime |
| Q-02 | Conflict and de-escalation training | Yes | Lifetime |
| ID | Experience | Minimum years | Mandatory |
|---|---|---|---|
| E-01 | Security management experience, ideally in a health or public setting | 5 | Yes |
7. Training requirements
Recommended common practice. Each facility adapts the list to its national law. Essential items apply in every setting; recommended items apply where resources allow.
| ID | Training | Tier | When | Validity | Linked policies | Linked competencies |
|---|---|---|---|---|---|---|
| T-01 | Facility induction | essential | at_entry | Once | POL-WHISTLE · POL-EQUAL · POL-DATA | – |
| T-02 | Safeguarding adults | essential | periodic | Every 3 year(s) | POL-SAFEG | – |
| T-03 | Safeguarding children | essential | periodic | Every 3 year(s) | POL-SAFEG | – |
| T-04 | Data protection and confidentiality | essential | annual | Every 1 year(s) | POL-DATA | C-03 |
| T-05 | Incident reporting and open disclosure | essential | periodic | Every 2 year(s) | POL-INC | – |
| T-06 | Governance, accountability and assurance | recommended | periodic | Every 3 year(s) | – | – |
| T-07 | Emergency and major incident command | essential | annual | Every 1 year(s) | POL-INC | C-01 · C-02 |
| T-08 | Speaking up, inclusion and equality leadership | essential | periodic | Every 2 year(s) | POL-WHISTLE · POL-EQUAL | – |
8. Health, fitness and language
| ID | Requirement | Frequency | Tier | Minimum in low-resource settings |
|---|---|---|---|---|
| H-03 | Fitness-to-work assessment at entry and after serious illness or injury | Every 12 months | recommended | Fitness check at entry |
| Language | Level | Mandatory |
|---|---|---|
| Official language of the country of practice | professional | Yes |
| English | working | Yes |
9. Competencies by level
| ID | Competency | Foundation | Practitioner | Expert | Assessed by | Revalidate | Linked trainings |
|---|---|---|---|---|---|---|---|
| C-01 | Security planning and risk | Follows security rules | Plans security cover | Designs security systems | Security audit | Every 12 months | T-07 |
| C-02 | Violence and incident response | Responds safely | Leads responses | Designs response procedures | Response exercise | Every 12 months | T-07 |
| C-03 | Access control and CCTV | Uses access systems | Manages access systems | Designs access and CCTV standards | Access audit | Every 12 months | T-04 |
10. Performance evaluation
- Probation: 6 months, with a sign-off review (recommended value).
- Appraisal: every 12 months against the competencies and indicators below.
| ID | Indicator | Target | Data source | Frequency |
|---|---|---|---|---|
| PI-01 | Security incidents reviewed in 24 hours | 100% | incident register | Monthly |
| PI-02 | Security plan exercised | 100% | exercise record | Annually |
| PI-03 | Access and CCTV audits passed | 100% | audit results | Quarterly |
11. Career ladder and promotion
| Level | Role | Minimum experience to move on | Qualifications | Competency minimums | Trainings required | Assessment |
|---|---|---|---|---|---|---|
| Executive | Security manager | 5 years (recommended) | Q-01, Q-02 | C-01 expert, C-02 practitioner | T-07 | Executive appointment and performance review |
12. Policies the post holder follows
Each policy is a standard template that the facility adopts and adapts. Templates are maintained centrally, so every facility works from the same version.
POL-SAFEG · Safeguarding adults and children
Purpose: Protect patients from abuse, neglect and harm, and make sure every concern is recognised and acted on.
Scope: All staff, volunteers and contractors.
Key rules:
Scope: All staff, volunteers and contractors.
Key rules:
- Recognise signs of abuse and neglect and record them factually.
- Report every concern to the designated safeguarding lead the same shift.
- Do not investigate alone.
- Share information only as the safeguarding procedure allows.
POL-DATA · Data protection and confidentiality
Purpose: Keep patient and staff information private, secure and used only for care and legal purposes.
Scope: All staff who access records or systems.
Key rules:
Scope: All staff who access records or systems.
Key rules:
- Access only the records needed for your work.
- Keep records secure; do not leave screens or paper unattended.
- Do not share information without a lawful basis.
- Report any breach to the data protection officer within 24 hours.
Linked trainings: T-10 · Review every 12 months · Template 0.1 (draft)
POL-WHISTLE · Speaking up (whistleblowing)
Purpose: Let staff raise patient safety or conduct concerns without fear of reprisal.
Scope: All staff.
Key rules:
Scope: All staff.
Key rules:
- Raise a concern with your line manager or the named speaking-up officer.
- If that route fails, escalate to the board or the national regulator.
- Retaliation against anyone who speaks up is a disciplinary offence.
- Concerns are recorded, investigated and the outcome given to the person raising them.
Linked trainings: T-01 · Review every 12 months · Template 0.1 (draft)
POL-EQUAL · Equality, diversity and inclusion
Purpose: Give every patient and colleague fair access, respectful treatment and reasonable adjustments.
Scope: All staff and patients.
Key rules:
Scope: All staff and patients.
Key rules:
- Treat every person with dignity regardless of background.
- Make reasonable adjustments, including interpreters, for language and disability.
- Report discrimination through the speaking-up route.
- Monitor access and outcomes by group.
Linked trainings: T-01 · Review every 24 months · Template 0.1 (draft)
POL-INC · Incident reporting and open disclosure
Purpose: Report and learn from incidents and near misses, and tell patients honestly when things go wrong.
Scope: All staff.
Key rules:
Scope: All staff.
Key rules:
- Report every incident and near miss the same shift.
- Give the patient and family an honest account and an apology where appropriate (open disclosure).
- Take immediate action to protect others.
- Learn: contribute to the review and follow the agreed actions.
13. Standards that name this role
14. Record history
| Date | Change | Approved by |
|---|---|---|
| 2026-10-27 | Draft record, batch 1 of the position build | Awaiting approval |