Crypto Custodian and Deputy Security Controller

Description

At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It's why we're coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we're headed. We're proud to share our story and Make Amazing Happen at CDW.

Introduction

Keeping our people, facilities, assets and systems safe and secure is the primary focus of this role, along with maintaining the necessary security accreditations and certifications required of us as a trusted UK Government supplier.

As a Crypto Custodian, you will gain responsibility for multiple security workstreams to protect CDW and client systems, it's people, infrastructure, information and assets. You will be tasked to develop and maintain relationships with stakeholders (including the MoD) to meet their requirements, including one to one liaison, setting expectations, interacting effectively and confidently with the Business Customers and Security Management.

Also acting as the Deputy Security Controller, the incumbent will be at the centre of security activities and programmes providing the full scope of protective security services and controls to ensure compliance with the Security Policy Framework, ISO 27001, Security Aspects Letters and other contractual security obligations such as DEFCON and DEFSTAN.

This position reports directly into the Security Controller.

The successful candidate will be based at CDW Rugby, but the role will involve a hybrid option of 2-3 days on site and 2-3 days at home.

This is a great opportunity for anyone who has previous experience of managing or supporting Government security, aspects, contracts and operations within a similar industry.

KEY DUTIES

• Delivering and managing MOD Cryptographic material and services, including accounting, ordering, distribution and communicating internally and externally with customers and stakeholders.
• Ensuring all cryptographic material is authorised for issue and work with wider team to effect timely delivery and integration.
• Brief Holders, Users and Technical staff to ensure they understand HMG and local policy and procedures governing the handling of cryptographic and classified assets.
• Issuance of cryptographic items on loan to holders and users, ensuring that all members have signed and understood their respective orders.
• Provision of crypto briefings to members that work with or in the vicinity of cryptographic material and debrief those where this no longer applies. Issuance of briefing certificates and ensuring Security Clearance requirements are maintained.
• Raising external paperwork for, and assisting with, internal audits and checks of holding, maintaining accurate recording of cryptographic material, ensuring compliance.
• Recognising breaches of Crypto and Communications Security Policy and the reporting accordingly. Contribute to the development of Cyber security strategies, policies, guidance, capabilities and awareness.
• Be able to provide security advice concerning cryptographic material, service capability and secure manufacturing.
• Ensure all Electronic Key (Ekey) processes, procedures and local working instructions are established, updated and stored at the appropriate classification.
• Assist with the roles of Controlling Authority and Cryptonet Controller, including undertaking ay mandatory training courses as required.
• The Deputy Security Controller is responsible for supporting the Security Controller to interpret, implement, and monitor security controls for the appropriate protection of government classified assets held by CDW in accordance with Cabinet Office's GSF007 and legacy Security Policy Framework (SPF).
• Liaison within CDW, and between CDW and the security officials of the relevant Contracting Authority is essential.
• Provide advice to personnel on the interpretation and implementation of contractual and, where appropriate, legislative security controls in addition to employees and sub-contractors with consideration to business outputs and contractual obligations.
• Engagement with National Security Vetting providers to undertake security vetting for new starters / contractors, coordinate renewals and develop CDW's aftercare programme.
• Ensuring that any breach of security is immediately reported immediately to the respective Contracting Authority and, if appropriate the regional police and that the circumstances are fully investigated, the outcome is recorded in the company breaches register and a full report and impact analysis is passed to the Contracting Authority.

KNOWLEDGE AND EXPERIENCE

• The candidate will be required to demonstrate detailed knowledge of Government security policy memoranda, managing cryptographic accounts and assets.
• The candidate must have completed the UKNDA Crypto Custodian Training and be experienced in using JSP 490, JSP 491 and JSP 608.
• Experience of developing and successfully implementing security policies and procedures to ensure the secure operation of our business is essential such that security is a business enabler.
• Maintaining our compliance with UK Government security frameworks and existing UK Government accreditations and certifications requires a security professional who is proficient in the interpretation and application of the required standards.
• Competency in incident management and leading investigations.

DESIRABLE

• Broader Quality Management System awareness and experience.
• Cyber Security Qualifications.
• Active member of Defence Industry Security Association (DISA).
• Extant Security Clearance (although can be sponsored if required).

PERSONAL ATTRIBUTES

• Exemplary engagement working confidently with both internal and external stakeholders to maintain a strong security culture and focus across the social spectrum and from all backgrounds including executive/operational levels.
• With an international reach in both private and public sector IT, CDW delivers products and services to over 170 countries; the incumbent will need the ability to work on their own initiative and as part of an international team of security professionals.
• Have the ability to multi-task and prioritise workload in an agile working environment without compromising the security of our organisation and clients whilst ensuring attention to detail.
• Capability of grasping business complexities with a disposition to solve issues and drive optimisation of processes
• The Cryptographic Custodian and Deputy Security Controller must be trusted; therefore, honesty and integrity are of the upmost importance.
• Formal security qualification and training or military/policing equivalent experience is essential.
• Member of the Chartered Institute of Information Security, or similar.

We make technology work so people can do great things.

CDW is a leading multi-brand provider of information technology solutions to business, government, education and healthcare customers in the United States, the United Kingdom and Canada. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. Together, we unite. Together, we win. Together, we thrive.

CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.