Security Accreditation Lead

Company Description

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.
 
By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.
 
From prototype to real-world impact - be part of a global shift by doing work that matters.

Job Description

Security Accreditation Lead: The Security Accreditation Lead provides the experienced leadership to guide the development of the front-end of the NATO DIANA OS application through a successful NATO Office of Security (NOS) accreditation process:

• Lead the successful security approval for each DIANA OS release.
• Develop and maintain a continuously updated Accreditation Pack aligned with NATO requirements.
• Produce a complete set of security artefacts ready for NOS/NCIA review.
• Provide input into the accreditation process being managed by other DIANA OS vendors.
• Promote a security-by-design foundation for future migration to Luxembourg Cyber Defence Cloud (LCDC) and uplift to NATO RESTRICTED.

Qualifications

Skills & Experience

Essential

• Extensive experience leading accreditation of complex systems (NATO, MoD, DoD, EU defence, national security agencies).
• Capability to obtain or hold NATO SECRET security clearance; sponsorship is possible
• Demonstrated leadership with security approval frameworks:
• NATO C-M(2002)49-REV1
• AC/35-D/2020
• D32 Cloud Security Directive
• Deep understanding of DevSecOps, secure CI/CD, container hardening, and cloud-native security. 
• Experience operating in multi-vendor, multi-tenant environments.
• Demonstrable experience securing modern web front ends in high-assurance environments, including implementation of secure-by-design UI architectures, OWASP Top 10 mitigation (XSS, CSRF, auth/session handling), secure identity and access integration (SSO, MFA, role-based access), client-side data protection, and support to formal security accreditation and assurance processes aligned with NATO / public-sector standards.

Preferred

• Prior experience working with NATO bodies (NCIA, NOS, NSPA).
• Experience in cloud-agnostic architectures and migration across secure hosting environments.

Additional Information

All your information will be kept confidential according to EEO guidelines.

Additional Employee Requirements  

• Participation in both internal meetings and external meetings via video calls, as necessary. 
• Ability to go into corporate or client offices to work onsite, as necessary. 
• Prolonged periods of remaining stationary at a desk and working on a computer, as necessary. 
• Ability to bend, kneel, crouch, and reach overhead, as necessary. 
• Hand-eye coordination necessary to operate computers and various pieces of office equipment, as necessary. 
• Vision abilities including close vision, toleration of fluorescent lighting, and adjusting focus, as necessary. 
• For positions that require business travel and/or event attendance, ability to lift 25 lbs, as necessary. 
• For positions that require business travel and/or event attendance, a valid driver’s license and acceptable driving record are required, as driving is an essential job function.

*If requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.   

USA Benefits (Full time roles only, does not apply to contractor positions)

• Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and various other benefit options  
• Flexible Spending Accounts (Medical, Transit, and Dependent Care)  
• Employer Paid Life Insurance and AD&D Coverages  
• Health Savings account paired with our low-cost High Deductible Medical Plan  
• 401(k) Safe Harbor Retirement plan with employer match with immediately vest   

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.