Lead Security Assurance Co-Ordinator – (SAC)

At Dstl we protect lives. We take innovative Science and Technology (S&T) and use it to keep the country safe.

Dstl Digital provides a variety of business services which are diverse and complex in nature, and not all are standard in their support arrangements. To deliver great service experiences to our users, Digital aims to provide services to known and accepted service levels, meaning the details of the end-to-end operational support model should be designed up-front. This is essential to achieving standardisation, consistency and cost effectiveness in future. This opportunity will allow you to shape a growing capability within Dstl. You will influence the direction of our future operation in a unique and exciting setting which not only meets the day to day organisational needs for Dstl but responds to a growing portfolio of innovative Digital commitments as well.

The Lead Security Assurance Co- Ordinator (SAC) role is a key role in facilitating the accreditation process, and ensures Dstl to comply with the Government-mandated Accreditation process.

In order to comply with the Government-mandated Accreditation process, and where the intention is to provide an Information & Communications Technology (ICT) system to process protectively marked or business critical information, a project or business team will invite the assistance of an expert Information Assurance (IA) advisor. The SAC provides the vital interface between the Accreditor, the supplier, the project team and the end user community, ensuring that all aspects of security are delivered throughout the project lifecycle.

The employment of the SAC enables project managers to oversee the wider issues of the project; project costs, delivery dates, user satisfaction, etc., without having to worry about liaison with security regulators (Accreditors), production of security documents, changes to security policies, and the associated list of tasks or fact-finding processes that could otherwise be performed by the SAC.

Dstl recognises the importance of diversity and inclusion as people from diverse backgrounds bring fresh ideas. We are committed to building an inclusive working environment in which each employee fulfils their potential and maximises their contribution.

We particularly welcome female and ethnic minority applicants and those from the LGBTQI community, as they are under-represented within Dstl at these levels.

In this role:

The SAC advises, monitors and reports on security matters relating to the projects and systems and may chair the SWG on behalf of the Project Manager. The SACs main tasks are to:

• Ensure appropriate action is taken to enable and maintain accreditation.
• Provide advice on security policy and technical solutions.
• Ensure that National and MoD Cryptosecurity and security policy is being correctly applied.
• Monitor security considerations that are being incorporated and report on them to the SWG.
• Establish the Terms of Reference for the SWG.
• Organise SWG meetings around a status list of requirements for each accreditation or re-accreditation covering COMSEC, COMPUSEC, TEMPEST, Key management and P3 (Physical, Procedural & Personnel) measures.
• Highlight and report unresolved security difficulties to the SWG.
• Ensure that the configuration management procedures meet the criteria for the required level of assurance and that Cryptonet Controlling functions are in place where necessary.
• Liaise with the National Security Authorities advisors, the Defence Cryptosecurity Authority and TLB Principal Security Advisors (PSyA) and advise the SWG as appropriate.
• Ensure that the security deliverables are available as and when required by the project plan.
• Responsible for the production of all security deliverables (e.g. security documentation) and ensure that they are fit for purpose (to the satisfaction of the Accreditor).
• Staff and coordinate the input to Sy Ops and any P3 measures required.
• Arrange with Accreditor for the issue of Interim and/or full accreditation certificates as required by stages of the project.
• Co-ordinates the Project Cryptographic plan.
• Ensure that all Project security related risks, as identified by the Accreditor and/or SWG, are promptly listed on the Projects Risk Register and reviewed at each SWG meeting.
• Ensure that a Project Information Risk Owner has been identified.
• Co-ordinate across other Dstl divisions, building a network with divisional SACs.

Dstl has adopted the MOD’s Project Delivery Capability Framework. Full details of the role descriptions and technical competencies can be downloaded from the following web site.

Leadership

As a leader in Defence you will help shape, role model and bring to life the ‘One Defence’ mindset that will enable us to deliver our vision and strategic objectives. Your leadership style must be inspiring, confident and empowering. Working at every level of our organisation to break down silos, unite teams and create a culture that is trusting, collaborative, innovative, diverse and inclusive. Enabling us to deliver with pace and agility through the skills, commitment and empowerment of our employees and military colleagues.

We are looking for someone who has: 

• Overall established technical knowledge/understanding of electronic, network and information system security measures.
• A good working knowledge of configuration management practices for Information Systems and must be aware of the principles of Risk Manager.

Technical skills

SAC support is to deliver: accredited networks that shall be available for experimentation, research and development; timely and effective security advice and support of users, project staff, System Manager; accurate and up-to-date accreditation documentation; use of internal project’s shared file storage areas and reporting processes.

Skills

Essential

• Attention to detail.
• Ability to work to demanding timescales.
• Stakeholder management.

Important Information

Our work in defence, security and intelligence requires our employees to be UK Nationals who are able to gain a high level of security clearance to undertake the projects we are involved in to protect us from security threats. For this reason, only UK Nationals will be able to apply for this role. If you are an international or dual-national candidate, and you think you have the skills we need, please consider applying to any of our government, security or defence partners.

This role will require full UK security clearance and you should have resided in the UK for the past 5 years. For some roles Developed Vetting will also be required, in this case you should have resided in the UK for the past 10 years.

Please see full job description at the bottom of the page 

We’ll assess you against these behaviours during the selection process:

• Leadership
• Communicating and Influencing
• Delivering at Pace
• Seeing the Big Picture

We only ask for evidence of these behaviours on your application form:

• Seeing the Big Picture

We’ll assess you against these technical skills during the selection process:

• Please explain your understanding of what technical skills are needed in the SAC role?
• Please explain what is involved in an Information Technology Health Check?

We only ask for evidence of these technical skills on your application form:

• Please explain what is involved in an Information Technology Health Check?

Benefits 

Dstl’s full range of great benefits can be found in the information pack which includes:

• Financial: An excellent pension scheme starting from 26% employer contribution (find out more here). In Year Rewarding Achievement bonuses and thank you vouchers. Rental deposit scheme and cycle to work scheme.

• Flexible working: Options include alternative working patterns such as; compressed hours (e.g. working a 4 day week/ 9 day fortnight), job shares and annualised hours (agreed number of hours per annum paid monthly i.e. working term-time only).

• Working hours: Flexibility around your working day (e.g. start time, finish time). Ability to bank hours in a 12 month reference period including the ability to accrue and use 3 days per calendar month.

• Where you work: Depending on your role, blended working may be available including remote working to suit you and your team. This can be discussed at interview.

• Annual leave: 25 days pro rata (rising to 30 after 5 years) plus 8 public holidays with the ability to buy/sell 5 additional days per annum.

• Family: Maternity, adoption or shared parental leave of up to 26 weeks with full pay, an additional 13 weeks statutory pay and a further 13 weeks unpaid

• Learning and Development: Dstl encourages and supports charterships, accreditations and provides employees access to fully funded apprenticeships up to level 7 (Masters Degree). Dstl will pay for 2 memberships with relevant bodies/institutions. Employees also have access to Civil Service Learning.

• Facilities: Onsite parking, EV Charging points, restaurants, cafés and gyms.

This job is not open to candidates who hold a dual nationality.

Job contact :

• Name : DSTL HR Recruitment Team
• Email : dstlrecruitment@dstl.gov.uk

Recruitment team

• Email : dstlrecruitment@dstl.gov.uk