Crypto Custodian

Role Overview

• Define and manage the crypto plan (Policies, registers, audits, incident management process and governance).
• Ensuring they are kept up to date in line with JSP490/IS4 updates and in full compliance with UK national standards.
• To ensure defined escalation pathway and action any suspected or actual breach of security in line with national and company policy.
• Investigating and reporting crypto incidents or compromises, liaising with authorities as required.
• Management of cryptographic items to include controlling, storing, accounting for, and disposing of cryptographic material (physical and digital) throughout its lifecycle across multiple sites.
• Maintenance of accurate records, inventories, and logs in line with national regulations and L3Harris requirements.
• Devise an effective tracking system for all cryptographic items on their charge and undertake internal musters.
• Responsibility for ensuring Suppliers understand and comply with national regulations and L3Harris requirements.
• Provide international support to L3Harris’ growing base of customers in respect of provision, return and repair of cryptographic materials.
• Ensuring compliance with international Export Control restrictions in place for cryptographic materials.
• Supporting accreditation and assurance activities for cryptographic systems to include leading internal audits and external inspections.
• Addressing findings and implementing corrective actions as required.
• Working with Operations and internal stakeholders to provide Key and Cryptographic material in line with Customer requirements and manufacturing timelines.
• Lead and provide SME guidance to business stakeholders to include briefing, debriefing, and training users to ensure they understand crypto responsibilities, alongside clear governance process.
• Promoting awareness and training to embed a culture of crypto security across the organisation.
• Develop and maintain close relationships with External and Customer stakeholders, providing SME guidance as required.
• Acting as the Point of Contact for the UK Authorities on cryptographic matters.
• Manage assigned team members ensuring effective tasking, compliance and delegating responsibilities where appropriate.
• Provide opportunities for learning and development.
• Manage the Crypto Authorisation and annual re-certification of cryptographic staff ensuring provision meets business requirements.

Requirements

• Previous experience in cryptographic account management, prior roles as a Crypto Custodian for MOD, other Government Agencies or relevant Industry is desirable.
• Prior application and understanding of UK Defence security frameworks (JSP 440, JSP 490, HMG IS4)
• Experience leading compliance, audits, and incident reporting within a high-security environment.
• Will be required to undergo formal Crypto Security Training

Benefits

• £3,000 to £6,000 DV Bonus – please note this level of clearance isn’t essential for this role.
• Half day finish on a Friday
• 25 days holiday per year (plus bank holidays), increasing with long service and with the opportunity to buy/sell up to 5 days
• Private medical insurance with optional family cover
• Pension scheme of up to 8% employer contribution
• Life Assurance 4x salary (flexible up to 10x)
• Group income protection
• Flexible opt-in extras such as a health care cash plan, dental insurance, gym membership, critical illness cover, cycle to work scheme, travel insurance and electric car scheme
• Employee Family Assistance Program providing mental health and wellbeing support
• Professional membership reimbursement (discretionary)