Security Delivery Lead - DV Cleared

Security Delivery Lead Responsibilities

• Develop and maintain the security assurance framework, schedules and supporting evidence.
• Lead security accreditation activities, managing conditions, risk acceptances and compliance requirements.
• Develop, implement and review security policies, procedures and control frameworks.
• Own security risk governance, maintaining risk registers, assessments and mitigation plans.
• Oversee security compliance assessments, audits and remediation activities.
• Maintain oversight of personnel security, vetting and clearance compliance.
• Ensure appropriate physical and environmental security controls.
• Oversee security incident and breach management, including investigations and corrective actions.
• Monitor security risks during service, technology and organisational changes.
• Provide security assurance reporting to senior leadership and customer stakeholders.
• Engage with accreditation authorities, Information Asset Owners and Senior Information Risk Owners (SIROs).
• Identify security weaknesses and drive improvements across the service.

Security Delivery Lead Skills and Experience

• Extensive experience in senior security leadership, governance or assurance roles.
• Proven security assurance experience within UK Defence, Government or highly regulated environments.
• Strong experience developing and maintaining security assurance frameworks.
• Demonstrable knowledge of security accreditation processes, evidence management and risk acceptance.
• Extensive security risk management, governance and compliance experience.
• Proven ability to develop security policies, standards and operational controls.
• Strong experience managing security audits, compliance assessments and remediation.
• Knowledge of personnel security, vetting requirements and physical security controls.
• Experience overseeing security incidents, investigations and corrective actions.
• Strong stakeholder management and senior-level security reporting skills.
• Experience maintaining security compliance during significant organisational or technical change.
• CISSP, CISM or CRISC certification would be advantageous.
• Knowledge of ISO 27001, NIST or equivalent security frameworks would be beneficial.
• Experience supporting large-scale managed IT services and Defence security governance would be desirable.