Role Purpose

The Crypto custodian is responsible to the HOE or approved delegates to manage all cryptographic items for SecureCloud Plus, ensuring full compliance to HMG standard IS4 and JSP 490.

Role Responsibilities

Key responsibilities for this role may include:

• Be thoroughly familiar with the Surreptitious Threat and Mitigation Process (STaMP) for the storage, handling, movement and routine destruction of Cryptographic items.
• Ensure compliance with HMG and local policy and procedures governing and procedures governing CRYPTO/ACCSEC assets, so as to minimise the possibility of a breach of security.
• Manage and account for all incoming items applicable to the departments Crypto Accounting system, ensuring items are correctly received, issued, transferred, destroyed or returned to the sender in accordance with official procedures.
• Maintain a system of local accounting for all ACCSEC items issued to the Crypto Account with supporting vouchers to record all transactions;
• Brief Holders, Users and Technical staff to ensure they understand HMG and local policy and procedures governing the handling of CRYPTO/ACCSEC and protectively marked assets;
• Issue cryptographic items on loan to holders and user, ensuring that all members have signed and understood their respective orders.
• Establish a system for internal checks of all cryptographic items issued to Account.
• Undertake surprise spot checks, at least monthly, on all CRYPTO items which are on loan and 6-monthly checks on those cryptographic items bearing the ACCSEC caveat.
• Personally carry out the routine destruction of superseded or surplus cryptographic items when authorised to do so.
• Arrange for the prompt and accurate entry of all amendments to publications marked Crypto/ACCSEC and other legacy markings held.
• Review stock holdings at regular intervals to ensure that surpluses do not accrue.
• Initiate immediate upwards incident reporting action on any suspected or actual cryptographic or crypto security incident.
• Where appropriate, undertake or co-ordinate incident investigation, report complication and recovery of assets.
• Crypto brief all members that work with or in the vicinity of cryptographic material and debrief those where this no longer applies; issue briefing certificates and amend Security Clearance database accordingly.
• Produce and maintain emergency evacuation and protection of cryptographic material.
• Maintenance of account records and associated documentation.
• Issuing and recording of all new assets, including archive, transfer and destruction records, producing statistics on an required basis. Any other security relate tasking raised by the Security Officer.

Education and Experience Requirements

As the Alternate Custodian you will have:

Completed the UKNDA Crypto Custodian Training and be experienced in using JSP 490, JSP 491 and JSP 453.

Excellent administration skills

SecureCloud+ is an equal opportunities employer and does not discriminate on the basis of age, sex, colour, religion, race, disability, or sexual orientation. Our hiring decisions are based on an individual’s experience and qualifications for the job advertised.