Delivery Team Security Lead (Security Assurance Coordinator)

Carbon 60; Southwick; On-site; GBP 70,000 - 90,000; Full time

Job summary

Carbon 60 leads a Delivery Team Service Lead role within Navy Digital, based at Portsmouth HMS Excellent, responsible for security-as-a-service delivery and cross-functional governance. The role requires ensuring secure, compliant delivery of digital and information security services for naval ICT environments.

The successful candidate will manage accreditation, RMADS, DPIAs, and risk reporting, while coordinating with MoD stakeholders to support agile software and hardware delivery in a

Qualifications

• MOD security clearance or willingness to undergo Security Clearance to SC level.
• Experience in security assurance and/or cyber risk management.
• Strong communication and documentation skills.

Responsibilities

• Coordinate security elements across RN capability to support Navy Digital projects.
• Develop accreditation strategies and RMADS for maritime environments.
• Produce DPIAs and manage risk and security cases.
• Interface with MoD IA stakeholders and Navy Digital teams.
• Support rapid development of Navy Digital software and hardware in an agile environment.

Skills

Security clearance

Cyber risk

Communication skills

Microsoft applications

Job description

Delivery Team Service Lead in the Security as a Service Team

HMS Excellent is home to the Naval Headquarters and front-line training units. Based on Whale Island in Portsmouth Harbour, it successfully blends heritage and history with a modern and progressive outlook. HMS Excellent is a unique shore establishment with its roots in more than 100 years of naval history.

Navy Digital is required to deliver and sustain digital and information security services that enable the secure operation of Information Communication Technology (ICT) equipment, services, and applications. In order for Navy Digital to achieve this goal in an agile and effective manner, a central security service must be established. This service will establish a single coherent approach to Navy Digital's requirements to prevent duplication and improve efficiency.

This Outcome is for the provision of Security as a Service across a full spectrum of programmes and projects delivering digital outcomes that enable current and future information-based capabilities supporting Navy Command Information, MoD and HMG defence and national security outputs.

Tasking

• Provide a central focal point and function for managing all existing and new and emerging security elements across both fixed and deployed RN capability, including:
• The prioritisation of existing and new security requirements against RN top-level objectives and outputs.
• The allocation of SQEP from a central security as a service function to Navy Digital projects and programmes of work to draw upon.
• The management of resource against demand for the service within the RN.
• Provide central oversight and co-ordinate planning for all through-life security activity across Navy Digital delivery and programmes of work.
• The development of accreditation and assurance strategies against complex security requirements within the maritime environment and across the Defence Lines of Development (DLODs).
• The production of key Information Assurancedeliverables to meet the needs of Navy Digital customers, as well as keyMoD and RN stakeholders, including:
• High and low-level security requirements.
• Risk Management & Accreditation Document Set (RMADS).
• Legal and regulatory artefacts applicable to the MoD e.g., Data Privacy Impact Assessments (DPIA).
• Risk Balance and Security Cases.
• The provision of security support enables the rapid development and delivery of Navy Digital software and hardware in an agile manner, whilst satisfying mandatory security requirements.
• Provide a consistent and coherent means of identifying, reporting, and escalating cyber risk across Navy Digital and the RN.
• Provide an interface between Navy Digital projects and MoD Information Assurance stakeholders e.g., Cyber Defence and Risk Accreditor.
• The ability to adapt and respond to future changes in security requirements and approaches towards Information Assurance.
• Providing knowledge and experience to assist Navy Digital to implement working-level technical, physical, and procedural security controls in accordance with MOD policy and local operating environments i.e., UK fixed locations responsible for hosting Navy Digital capability.

Person Specification

To be considered for this role you will have the following:

Desirable Skills

• MOD security clearance or be content to undergo Security Clearance to SC level.
• Experience within security assurance and/or cyber risk
• Knowledge of industry standards and cyber security/risk
• Background knowledge of either naval or maritime would be advantageous
• Excellent communication skills
• Able to follow laid down process
• Computer literate and good knowledge of Microsoft applications.

Role specifics

• Start date - ASAP
• End date - 31st July 2028
• Rate - dependent on experience and interview
• Base Location -Semaphore Tower, HMNB PortsmouthGuidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy