Security Governance Lead (SC/NPPV)

Security Governance Lead (SC/NPPV) - Contract role - Hybrid working/London - £competitive

Synergize Consulting are now hiring for a Security Governance Lead to work at a leading consultancy client on a contract basis.

The successful candidate will be working as part of a multidisciplinary programme team, providing specialist security, information governance and assurance expertise, helping to ensure that new data integration capabilities are designed and delivered securely, lawfully and in line with relevant policing and organisational standards.

Responsibilities include:

• Develop and maintain threat models, identifying and assessing threats across data integration services, interfaces and supporting infrastructure.

• Develop and maintain security architecture, ensuring security is Embedded into the design of data integration solutions from the outset.

• Lead or contribute to Information Governance (IG) assessments, identifying risks and ensuring appropriate governance controls are in place.

• Develop an audit log reconstruction framework, enabling effective investigation and reconstruction of data access, movement and processing activity.

• Identify security, privacy and information governance risks and support the development of appropriate mitigations.

• Work closely with architects, developers, data specialists, programme managers and policing stakeholders to ensure security and governance requirements are understood and delivered.

• Provide security and IG assurance throughout the programme life cycle, from requirements and design through to implementation and operational readiness.

• Produce clear documentation, assessments and recommendations for technical and non-technical stakeholders.

• Support governance boards, assurance reviews and programme-level risk management.

• Ensure security and information governance considerations are appropriately reflected in programme and technical documentation.

Experience required:

• Experience in a senior or Lead role, which includes assessing Threat and vulnerability models

• Security architecture and security-by-design principles.

• Information governance and data protection requirements.

• Supporting DPIAs and Information Sharing Agreements.

• Designing or assessing audit trails and logging requirements.

• Working with complex data flows, APIs, integrations and interconnected systems.

• Identifying and managing security, privacy and information risks.

• Producing high-quality security and governance documentation.

• Communicating complex technical risks clearly to both technical and senior non-technical audiences

• Due to the nature of the role, candidates will need to hold, or be eligible and willing to undergo, a certain level of security clearance (SC/NPPV)

If you are looking to take the next exciting step in your IT career, please send in your CV for immediate consideration.