Senior STRAPSO, Governance & Rosa Manager

We are currently seeking a Senior STRAPSO, Governance & Rosa Manager to manage the risks identified by both the Physical Security and Personal Security. They will manage the Security Risk Assurance Decision (SRAD) process and work with risk managers to implement contingencies to resolve, reduce or manage the identified risk.

This role will also require the post holder to be inducted onto the STRAP regime. STRAP is a regime that regulates access to sensitive intelligence material which requires more protective handling than is afforded by the standard arrangements for government assets. To be eligible to apply for STRAP, applicants must hold full UK Nationality or dual/multi-nationality, subject to one part being British and the other part/s to be reviewed on a case-by-case basis. Please note those whose right to work in the UK is subject to immigration controls are ineligible to apply for this role.

Clearance also typically requires a 10-year, verifiable UK-based footprint, where individuals have not been out of the UK 3 months or more in any 12-month period during that time. More information can be found about the vetting and clearance levels before completing your application.

Please note, this is a reserved post.

• Set and lead people strategy aligned to organisational objectives
• Actively manage UKHSA SRAD Process, identifying recording and mitigating security risk management proposals with senior risk owners across UKHSA
• Dynamically addressing new and emergent risks and advising on the escalation of the risk to the SRAD process
• Manage the SRAD data base ensuring risk owners update their risk interventions and ensuring that appropriate risks are raised at the corporate risk governance meeting according to threat harm risk likelihood RAG matrix status
• Draft and publish UKHSA policy and direction on Security Risk Management Framework
• Produce management information (KPQs and KPIs) and risk reporting for ExCo, the UKHSA Departmental Security Health Check (DSHC) and assist in the preparation of the UKHSA Annual Security Report
• Manage ROSA accounts across the UKHSA, validate security clearance and manages account suspensions and terminations
• Enrol users and reset PINs Issue and manage two-factor authentication keys appoints and train enrollers
• Review usage and coordinate budget with service lead, maintain partner key information sheet
• Deliver STRAPSO Security Policy Framework, liaise across government and with the central STRAP Authority
• Ensure STRAP information and assets are handled, stored, transmitted and destroyed according to SPF deliver briefings and inductions, liaison and compliance
• Manage and administer applications for clearances and role changes liaising with line management regarding sensitive enquiries
• Provide secure administrative management and control of material and environments in order to protect highly sensitive material and maintain accreditation requirements
• Support good information management compliance in accordance with policies, procedures and government standards in relation to access to and use of classified material and classified IT
• Support the wider security function of protecting and securing personnel, physical and information assets
• Manage routine security and access control, secure environments in accordance with associated security standards engaging with the authorities
• Provide day-to-day advice and assistance to colleagues regarding sensitive material and IT systems
• Manage and administer applications for clearances and role changes liaising with line management regarding sensitive enquiries
• Manage/administer account applications and access to IT
• Maintain accurate records of inductions/de-inductions and IT accounts
• Conduct briefings and familiarisation sessions for IT systems to colleagues of all grades
• Manage access to secure meeting rooms and video conferencing facilities liaising with partners across government regarding clearances and related matters

The Senior STRAPSO, Governance & Rosa Manager will be required to identify interdependencies between physical and personnel security issues as well as those which cross over into information and cyber security functions working closely with both the UKHSA Cyber and inform risk managers.

They will report to the UKHSA Security Advisor in order to drive forward a coordinated process driven security risk management culture within the UKHSA. This will require engagement across the UKHSA and then out into DHSC. They will often talk to new people from across the UKHSA advising, guiding, and informing them of the UKHSA policies.

They will also be deputy Rosa manager. Rosa is the cross-government information management system for data assets protectively marked secret.

They will be required to liaise across government and with the central STRAP Authority.

They will advise on the UKHSA Security Risk Management Security policies and guidance across all the roles and responsibilities and interpret the CEO and Executive Committee risk tolerance and advise Risk Owners how to navigate and manage individual risk profiles according to this established risk tolerance on a case by case basis.

This role is part of the wider Government Security Profession.

The above is only an outline of the tasks, responsibilities and outcomes required of the role. You will carry out any other duties as may reasonably be required by your line manager.

The job description and person specification may be reviewed on an ongoing basis in accordance with the changing needs of the organisation.

Essential Criteria

• Policy development and delivery experience
• Experience of identifying, recording and mitigating security risks, and working with risk owners to implement risk management proposals
• Experience of managing security risk management processes, databases, records and reporting to support organisational governance and decision-making
• Experience of handling, storing, transmitting and protecting highly sensitive or classified information in accordance with security policies, procedures and government standards
• Experience of managing and administering security clearances, access controls, account applications or secure information systems
• Experience of providing advice, guidance, briefings or training to stakeholders on security policies, procedures and compliance requirements

Desirable Criteria

• Membership or associate of the Security Institute would be advantageous
• Knowledge of NPSA
• Security experience