Security Assurance & Governance Lead

DXC Technology Company; Farnborough; On-site; GBP 90,000 - 120,000; Full time

Job summary

DXC Technology is a leading enterprise technology and innovation partner providing security-focused services. The Security Delivery Lead oversees the security assurance regime, accreditation support, risk governance, and policy compliance for the service delivery lifecycle.

The role requires ensuring a robust defence security posture, coordinating with client security teams and leadership, and maintaining continuous improvement across security controls and processes.

Qualifications

Responsibilities

• Develop the security assurance regime for the service, defining the framework and evidence requirements.
• Own the security assurance schedule, ensuring activities are planned, executed, evidenced, and reported.
• Define and maintain the security assurance evidence framework for accreditation and client security teams.
• Act as the primary contact for security accreditation matters and engage with client authorities.
• Maintain a register of accreditation conditions, caveats, and risk acceptances, tracking closure.
• Develop and enforce security policies and procedures aligned with client requirements.
• Establish and maintain the security risk governance framework and oversee risk registers.
• Support compliance monitoring, assessments, and remediation of non-compliance findings.
• Provide oversight of defence security posture and communicate risk to leadership and clients.
• Ensure personnel security clearance and vetting requirements are met for all staff.
• Oversee physical security controls and environment, aligned with classification and sensitivity.

Skills

Security governance

Policy development

Risk assessment

Stakeholder engagement

Job description

DXC Technology is a leading enterprise technology and innovation partner providing security-focused services. The Security Delivery Lead oversees the security assurance regime, accreditation support, risk governance, and policy compliance for the service delivery lifecycle.

The role requires ensuring a robust defence security posture, coordinating with client security teams and leadership, and maintaining continuous improvement across security controls and processes.