Head of Security Assurance

The Head of Security Assurance is responsible for leading the Security Assurance Department, primarily composed of Security Assurance coordinators. This role involves coordinating all security assurance activities to ensure that SecureCloud+ services and supporting internal IT meet the highest security standards and customer requirements. The position supports the delivery of innovative, accreditable, cost-efficient, and profitable solutions to comply with HMG’s security classification system and leads the transformation of service delivery to align with the MOD’s secure by design methodology.

The role encompasses two key areas : Information Assurance and Information Security . It involves implementing measures to protect and safeguard the company's critical information and systems, ensuring integrity, availability, authentication, confidentiality, and non-repudiation, as well as preventing illegitimate access, usage, revelation, alteration, disruption, and destruction of information.

Role Responsibilities

• Lead and manage all members of the Security Assurance department.
• Mentor junior team members.
• Promote a strong security culture within the company.
• Coordinate security accreditation and assurance processes for new and existing services.
• Support the completion of IT Health Checks (ITHC).
• Coordinate assurance activities with MOD and other authorities.
• Support development and maintenance of the Information Security Management System (ISMS), including Risk Management and RMADS.
• Assess risks to information security and work with the Senior Information Security Manager to implement policies and procedures.
• Plan and maintain compliance activities across various security requirements.
• Support monitoring of Information Assurance.
• Coordinate and implement protective security activities, including physical security.
• Manage information governance, including annual assessments and risk management.
• Handle security-related investigations, reporting, and follow-up actions.
• Support security awareness, education, and training programs.
• Coordinate with suppliers, consultants, and service providers.
• Represent the security team in project workgroups and boards.
• Lead ongoing audits to ensure compliance and continuous improvement.
• Assist the CISO in periodic policy and procedure reviews.
• Oversee follow-up actions to security issues.

Education and Experience Requirements

Candidates should have :

SecureCloud+ is an equal opportunities employer and does not discriminate based on age, sex, color, religion, race, disability, or sexual orientation. Hiring decisions are based on experience and qualifications. #J-18808-Ljbffr