Delivery Team Security Lead (Security Assurance Coordinator) in Garelochhead

Navy Digital is required to deliver and sustain digital and information security services that enable the secure operation of Information Communication Technology (ICT) equipment, services, and applications. In order for Navy Digital to achieve this goal in an agile and effective manner, a central security service must be established. This service will establish a single coherent approach to Navy Digital's requirements to prevent duplication and improve efficiency.

This Outcome is for the provision of Security as a Service across a full spectrum of programmes and projects delivering digital outcomes that enable current and future information-based capabilities supporting Navy Command Information, MoD and HMG defence and national security outputs.

Tasking

• Provide a central focal point and function for managing all existing and new and emerging security elements across both fixed and deployed RN capability, including:
• The prioritisation of existing and new security requirements against RN top-level objectives and outputs.
• The allocation of SQEP from a central security as a service function to Navy Digital projects and programmes of work to draw upon.
• The management of resource against demand for the service within the RN.
• Provide central oversight and co-ordinate planning for all through-life security activity across Navy Digital delivery and programmes of work.
• The development of accreditation and assurance strategies against complex security requirements within the maritime environment and across the Defence Lines of Development (DLODs).
• The production of key Information Assurance deliverables to meet the needs of Navy Digital customers, as well as key MoD and RN stakeholders, including:
• High and low-level security requirements.
• Risk Management & Accreditation Document Set (RMADS).
• Legal and regulatory artefacts applicable to the MoD e.g., Data Privacy Impact Assessments (DPIA).
• Risk Balance and Security Cases.
• The provision of security support enables the rapid development and delivery of Navy Digital software and hardware in an agile manner, whilst satisfying mandatory security requirements.
• Provide a consistent and coherent means of identifying, reporting, and escalating cyber risk across Navy Digital and the RN.
• Provide an interface between Navy Digital projects and MoD Information Assurance stakeholders e.g., Cyber Defence and Risk Accreditor.
• The ability to adapt and respond to future changes in security requirements and approaches towards Information Assurance.
• Providing knowledge and experience to assist Navy Digital to implement working-level technical, physical, and procedural security controls in accordance with MOD policy and local operating environments i.e., UK fixed locations responsible for hosting Navy Digital capability.

Person Specification

To be considered for this role you will have the following:

Desirable Skills

• MOD security clearance or be content to undergo Security Clearance to SC level.
• Experience within security assurance and/or cyber risk.
• Knowledge of industry standards and cyber security/risk.
• Background knowledge of either naval or maritime would be advantageous.
• Excellent communication skills.
• Able to follow laid down process.
• Computer literate and good knowledge of Microsoft applications.

Role specifics

• Start date - ASAP
• End date - 31st July 2028
• Rate - dependent on experience and interview
• Base Location - Faslane, Scotland