Overview
The Security Lead will serve as the accountable security owner for a managed service within the UK Public Sector, specifically overseeing the operational security of Oracle ERP systems. This role requires collaboration with various stakeholders including client security teams and external partners, focusing on maintaining compliance with security policies and managing sensitive data. The contractor will be responsible for leading security operations, ensuring all team members meet security clearance requirements, and integrating with the client's Security Operations Centre.
Responsibilities
- Lead and own day-to-day operational responsibility for service security across the managed service.
- Advise the client on security status and address identified risks.
- Ensure all Supplier staff handling client data are appropriately cleared.
- Provide timely reports to the client Security Operations Centre.
- Coordinate responses to security incidents as per the client's response plan.
- Conduct and support annual penetration tests and disaster recovery exercises.
- Define and maintain standard operating procedures for security protocols.
- Communicate regularly with the client regarding security matters and incidents.
Requirements
- Minimum of 5 years' experience as a security owner in a UK Central Government context.
- Deep knowledge of NCSC guidance, including IAS5 and Cyber Assessment Framework.
- Experience with Oracle Cloud security and SIEM reporting.
- Proven track record of leading clearance processes for SC and DV.
- Strong writing skills for audit and governance documentation.
- Must have current DV clearance or SC clearance with a path to DV.
- Ability to work exclusively within the UK and attend secure client sites as needed.
- Desirable certifications include CISSP, CISM, or Oracle Cloud Security certifications.