Job Specification

Delivery Team Support Lead in the Security as a Service Team

Navy Digital is required to deliver and sustain digital and information security services that enable the secure operation of Information Communication Technology (ICT) equipment, services, and applications. In order for Navy Digital to achieve this goal in an agile and effective manner, a central security service must be established. This service will establish a single coherent approach to Navy Digital's requirements to prevent duplication and improve efficiency.

This Outcome is for the provision of Security as a Service across a full spectrum of programmes and projects delivering digital outcomes that enable current and future information-based capabilities supporting Navy Command Information, MoD and HMG defence and national security outputs.

Tasking

• Provide a central focal point and function for managing all existing and new and emerging security elements across both fixed and deployed RN capability, including:
• The prioritisation of existing and new security requirements against RN top-level objectives and outputs.
• The allocation of SQEP from a central security as a service function to Navy Digital projects and programmes of work to draw upon.
• The management of resource against demand for the service within the RN.
• Provide central oversight and co-ordinate planning for all through-life security activity across Navy Digital delivery and programmes of work.
• The development of accreditation and assurance strategies against complex security requirements within the maritime environment and across the Defence Lines of Development (DLODs).
• The production of key Information Assurance deliverables to meet the needs of Navy Digital customers, as well as key MoD and RN stakeholders, including:
  • High and low-level security requirements.
  • Risk Management & Accreditation Document Set (RMADS).
  • Legal and regulatory artefacts applicable to the MoD e.g., Data Privacy Impact Assessments (DPIA).
  • Risk Balance and Security Cases.
• The provision of security support enables the rapid development and delivery of Navy Digital software and hardware in an agile manner, whilst satisfying mandatory security requirements.
• Provide a consistent and coherent means of identifying, reporting, and escalating cyber risk across Navy Digital and the RN.
• Provide an interface between Navy Digital projects and MoD Information Assurance stakeholders e.g., Cyber Defence and Risk Accreditor.
• The ability to adapt and respond to future changes in security requirements and approaches towards Information Assurance.
• Providing knowledge and experience to assist Navy Digital to implement working-level technical, physical, and procedural security controls in accordance with MOD policy and local operating environments i.e., UK fixed locations responsible for hosting Navy Digital capability.