Crypto Custodian and Deputy Security Controller

Join to apply for the Crypto Custodian and Deputy Security Controller role at CDW UK

At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers.

Keeping our people, facilities, assets and systems safe and secure is the primary focus of this role, along with maintaining the necessary security accreditations and certifications required of us as a trusted UK Government supplier.

As a Crypto Custodian, you will gain responsibility for multiple security workstreams to protect CDW and client systems, it’s people, infrastructure, information and assets. You will be tasked to develop and maintain relationships with stakeholders (including the MoD) to meet their requirements.

Also acting as the Deputy Security Controller, the incumbent will be at the centre of security activities and programmes providing the full scope of protective security services and controls to ensure compliance with the Security Policy Framework, ISO 27001, Security Aspects Letters and other contractual security obligations.

This position reports directly into the Security Controller.

The successful candidate will be based at CDW Rugby, but the role will involve a hybrid option of 2-3 days on site and 2-3 days at home.

KEY DUTIES

• Delivering and managing MOD Cryptographic material and services, including accounting, ordering, distribution and communicating internally and externally with customers and stakeholders.
• Ensuring all cryptographic material is authorised for issue and work with wider team to effect timely delivery and integration.
• Brief Holders, Users and Technical staff to ensure they understand HMG and local policy and procedures governing the handling of cryptographic and classified assets.
• Issuance of cryptographic items on loan to holders and users, ensuring that all members have signed and understood their respective orders.
• Provision of crypto briefings to members that work with or in the vicinity of cryptographic material and debrief those where this no longer applies.
• Raising external paperwork for, and assisting with, internal audits and checks of holding, maintaining accurate recording of cryptographic material, ensuring compliance.
• Recognising breaches of Crypto and Communications Security Policy and the reporting accordingly.
• Be able to provide security advice concerning cryptographic material, service capability and secure manufacturing.
• Ensure all Electronic Key (Ekey) processes, procedures and local working instructions are established, updated and stored at the appropriate classification.
• Assist with the roles of Controlling Authority and Cryptonet Controller, including undertaking any mandatory training courses as required.
• The Deputy Security Controller is responsible for supporting the Security Controller to interpret, implement, and monitor security controls for the appropriate protection of government classified assets held by CDW.
• Liaison within CDW, and between CDW and the security officials of the relevant Contracting Authority is essential.
• Provide advice to personnel on the interpretation and implementation of contractual and, where appropriate, legislative security controls.
• Engagement with National Security Vetting providers to undertake security vetting for new starters / contractors, coordinate renewals and develop CDW’s aftercare programme.
• Ensuring that any breach of security is immediately reported to the respective Contracting Authority and, if appropriate the regional police and that the circumstances are fully investigated.

KNOWLEDGE AND EXPERIENCE

• The candidate will be required to demonstrate detailed knowledge of Government security policy memoranda, managing cryptographic accounts and assets.
• The candidate must have completed the UKNDA Crypto Custodian Training and be experienced in using JSP 490, JSP 491 and JSP 608.
• Experience of developing and successfully implementing security policies and procedures to ensure the secure operation of our business is essential.
• Maintaining our compliance with UK Government security frameworks and existing UK Government accreditations and certifications requires a security professional who is proficient in the interpretation and application of the required standards.
• Competency in incident management and leading investigations.

DESIRABLE

• Broader Quality Management System awareness and experience.
• Cyber Security Qualifications.
• Active member of Defence Industry Security Association (DISA).
• Extant Security Clearance (although can be sponsored if required).

PERSONAL ATTRIBUTES

• Exemplary engagement working confidently with both internal and external stakeholders to maintain a strong security culture and focus across the social spectrum and from all backgrounds including executive/operational levels.
• Have the ability to work on their own initiative and as part of an international team of security professionals.
• Have the ability to multi-task and prioritise workload in an agile working environment without compromising the security of our organisation and clients whilst ensuring attention to detail.
• Capability of grasping business complexities with a disposition to solve issues and drive optimisation of processes.
• The Cryptographic Custodian and Deputy Security Controller must be trusted; therefore, honesty and integrity are of the utmost importance.
• Formal security qualification and training or military/policing equivalent experience is essential.
• Member of the Chartered Institute of Information Security, or similar.

CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.