Crypto Custodian

Job description

Job Description

Crypto Custodian

Position Description
Location: Surrey (Leatherhead)

Would you like to work for an organisation with over 40 years’ experience delivering secure, mission-critical IT solutions to Space, Defence and Intelligence clients.

CGI provides secure, mission-critical solutions to Space, Defence and Intelligence clients

Reporting to the UK Security Controller, the role of a Crypto Custodian and Deputy StrapSO has arisen in the UK Security Controllers office. When engaged, the post holder will be read onto other Government departments in order to carry out the various tasks associated with Crypto Custodian and Deputy StrapSO.

Our roles are only available if you hold or fulfil the criteria to obtain a UK Security Clearance.

Your future duties and responsibilities
As a Subject Matter Expert (SME) in Cryptographic and code-word account management, the Crypto Custodian will be expected to have a detailed understanding of protectively marked asset management and develop a detailed understanding of security management areas outside of their remit.

The Crypto Custodian will be expected to develop, own and maintain HMG and CGI standard security templates for use in their daily tasks and prepare briefings as required for other members across the business. The functions detailed within encompass the spectrum of works that the individual will be required to undertake and are therefore considered generic to the role.

The Crypto Custodian will be personally responsible to the UK Security Controller for the receipt, safe custody, whole life accounting and control of all CRYPTO/ACCSEC cryptographic items supplied to the CGI UK Security Cryptographic Account.

The Crypto Custodian will be the focal point for advice and guidance on the administration of all cryptographic material issued to and held by CGI UK at the Leatherhead office and will provide support, as needed, to other Account Holders in CGI UK.

Required qualifications to be successful in this role
• Be thoroughly familiar with the minimum national baseline measures for the storage, handling, movement and routine destruction of Cryptographic items

• Ensure compliance with HMG and Local policy and procedures governing CRYPTO/ACCSEC assets, so as to minimise the possibility of a breach of security

• Manage and account for all incoming items applicable to the departments Crypto Accounting system, ensuring items are correctly received, issued, transferred, destroyed or returned to the sender in accordance with official procedures

• Maintain disposition records of all Cryptographic items issued to the CGI Security Crypto Account to ensure successful bi-annual mustering and auditing of the account by UKNDA or other departments

• Maintain a system of local accounting for all ACCSEC items issued to the CGI Security Crypto Account with supporting vouchers to record all transactions;

• Brief Holders, Users and Technical staff to ensure they understand HMG and local policy and procedures governing the handling of CRYPTO/ACCSEC and protectively marked assets;

• Issue cryptographic items on loan to holders and users, ensuring that all members have signed and understood their respective orders

• Establish a system for internal checks of all cryptographic items issued to CGI UK Account

• Undertake surprise spot checks, at least monthly, on all CRYPTO items which are on loan and 6-monthly checks on those cryptographic items bearing the ACCSEC caveat

• Personally carry out the routine destruction of superseded or surplus cryptographic items when authorised to do so

• Arrange for the prompt and accurate entry of all amendments to publications marked CRYPTO/ACCSEC and other legacy markings held

• Review stock holdings at regular intervals to ensure that surpluses do not accrue

• Initiate immediate upward incident reporting action on any suspected or actual cryptographic or crypto security incident

• Where appropriate, undertake or co-ordinate incident investigation, report compilation and recovery of assets

• Crypto brief all members that work with or in the vicinity of cryptographic material and debrief those where this no longer applies; issue briefing certificates and amend the CGI Security Clearance database accordingly

• Host and brief client auditors at annual musters of account holdings, producing statistics on an ‘as required’ basis

• Produce and maintain emergency action plans for the emergency evacuation and protection of cryptographic material.

• Code-word Account Support the CGI UK Security Controller as the Deputy StrapSO in maintaining all aspects of the Strap code-word account in accordance with official HMG publications, including:

o Maintenance of account records and associated documentation issued by HMG
o Briefing those who need to hold code-word protectively marked material, issuing clearance certificates, updating the clearance database and debriefing individuals when access to code-word material is no longer required.

• Security Containers and Combinations Maintain accurate records of CGI UK’s security containers, their locations, holders and codes, including:
o Maintenance of documentation pertaining to HMG security containers and combination records.
o Arrange for the purchase and delivery of new containers and associated equipment.

• Secure Archiving Maintain CGI’s Government Secure Archive to include:
o Maintenance of secure archive records, including archive documentation and the Classified Assets database.
o Liaison with the archive facility to arrange for the deposit, mustering of contents and withdrawal of boxes
o Arrange for the purchase and delivery of archive boxes and associated equipment.

• Secure Destruction Maintain all destruction records including:
o Maintenance of secure destruction records, including destruction certificates and updates to the Classified Assets database.
o Liaise with the destruction facility to arrange for the collection of material for destruction, escorting collection vehicle to facility where required.
o Arrange for the purchase and delivery of destruction bags and associated equipment.

• Classified Assets Database Maintain CGI’s Classified Assets database to include:
o synchronisation of paper and electronic registers
o Issuing and recording of all new assets, including archive, transfer and destruction records, producing statistics on an as required basis Any other security related tasking raised by the Security Manager.

QUALIFICATIONS As Crypto Custodian, the post holder must have attended a recognised Cryptographic Custodian Course.

COMPETENCIES Good knowledge of cryptographic documentation and standards, to include both CRYPTO and ACCSEC management and accounting procedures. Basic InfoSec knowledge as the member will not be a user of the items they manage.

Our projects are based in a CGI office or client site but may require travel to other locations.

The successful candidate must be able to spend time working away from home, if required.

Build your career with us.

It is an extraordinary time to be in business. As digital transformation continues to accelerate, CGI is at the center of this change—supporting our clients’ digital journeys and offering our professionals exciting career opportunities.

At CGI, our success comes from the talent and commitment of our professionals. As one team, we share the challenges and rewards that come from growing our company, which reinforces our culture of ownership. All of our professionals benefit from the value we collectively create.

Be part of building one of the largest independent technology and business services firms in the world.

Learn more about CGI at www.cgi.com.

No unsolicited agency referrals please.

CGI is an equal opportunity employer.

Skills

Reference

677930