Crypto Custodian and Deputy Security Controller

Benefits

Additional Information

At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It's why we're coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we're headed. We're proud to share our story and Make Amazing Happen at CDW. Introduction Keeping our people, facilities, assets and systems safe and secure is the primary focus of this role, along with maintaining the necessary security accreditations and certifications required of us as a trusted UK Government supplier. As a Crypto Custodian, you will gain responsibility for multiple security workstreams to protect CDW and client systems, it's people, infrastructure, information and assets. You will be tasked to develop and maintain relationships with stakeholders (including the MoD) to meet their requirements, including one to one liaison, setting expectations, interacting effectively and confidently with the Business Customers and Security Management. Also acting as the Deputy Security Controller, the incumbent will be at the centre of security activities and programmes providing the full scope of protective security services and controls to ensure compliance with the Security Policy Framework, ISO 27001, Security Aspects Letters and other contractual security obligations such as DEFCON and DEFSTAN. This position reports directly into the Security Controller. The successful candidate will be based at CDW Rugby, but the role will involve a hybrid option of 2-3 days on site and 2-3 days at home. This is a great opportunity for anyone who has previous experience of managing or supporting Government security, aspects, contracts and operations within a similar industry. KEY DUTIES Delivering and managing MOD Cryptographic material and services, including accounting, ordering, distribution and communicating internally and externally with customers and stakeholders. Ensuring all cryptographic material is authorised for issue and work with wider team to effect timely delivery and integration. Brief Holders, Users and Technical staff to ensure they understand HMG and local policy and procedures governing the handling of cryptographic and classified assets. Issuance of cryptographic items on loan to holders and users, ensuring that all members have signed and understood their respective orders. Provision of crypto briefings to members that work with or in the vicinity of cryptographic material and debrief those where this no longer applies. Issuance of briefing certificates and ensuring Security Clearance requirements are maintained. Raising external paperwork for, and assisting with, internal audits and checks of holding, maintaining accurate recording of cryptographic material, ensuring compliance. Recognising breaches of Crypto and Communications Security Policy and the reporting accordingly. Contribute to the development of Cyber security strategies, policies, guidance, capabilities and awareness. Be able to provide security advice concerning cryptographic material, service capability and secure manufacturing. Ensure all Electronic Key (Ekey) processes, procedures and local working instructions are established, updated and stored at the appropriate classification. Assist with the roles of Controlling Authority and Cryptonet Controller, including undertaking ay mandatory training courses as required. The Deputy Security Controller is responsible for supporting the Security Controller to interpret, implement, and monitor security controls for the appropriate protection of government classified assets held by CDW in accordance with Cabinet Office's GSF007 and legacy Security Policy Framework (SPF). Liaison within CDW, and between CDW and the security officials of the relevant Contracting Authority is essential. Provide advice to personnel on the interpretation and implementation of contractual and, where appropriate, legislative security controls in addition to employees and sub-contractors with consideration to business outputs and contractual obligations. Engagement with National Security Vetting providers to undertake security vetting for new starters / contractors, coordinate renewals and develop CDW's aftercare programme. Ensuring that any breach of security is immediately reported immediately to the respective Contracting Authority and, if appropriate the regional police and that the circumstances are fully investigated, the outcome is recorded in the company breaches register and a full report and impact analysis is passed to the Contracting Authority. KNOWLEDGE AND EXPERIENCE The candidate will be required to demonstrate detailed knowledge of Government security policy memoranda, managing cryptographic accounts and assets. The candidate must have completed the UKNDA Crypto Custodian Training and be experienced in using JSP 490, JSP 491 and