Technical Service Delivery Lead

The Technical / Service Delivery Lead is responsible for providing independent quality assurance and technical oversight of security assessment execution and reporting. This senior role ensures that all findings, risk ratings, and remediation guidance undergo thorough peer review before final approval and delivery to Treasury, maintaining compliance with mandated standards and frameworks. Responsibilities:

• Provide technical oversight of security assessment execution.
• Peer review findings, risk ratings, and remediation guidance for accuracy and consistency.
• Quality assure the final technical report, ensuring compliance with Statement of Requirements (SOR) contents.
• Map findings to industry-standard security categorizations, benchmarks, and best practices.
• Review coverage against agreed plans and challenge any gaps.
• Validate CVSS v3.1 scoring consistency across analysts and findings.
• Verify that every finding cites specific files, classes, and methods with supporting evidence.
• Confirm remediation guidance is technically feasible within a C#/.NET codebase.
• Own and maintain the peer-review sign-off record as evidence of quality gates.
• Ensure deliverable formats comply with SOR software standards (PDF with editable Word copy, PowerPoint presentations).
• Act as the second escalation tier above the Project Manager for issues arising during delivery.
• Support closeout deep-dive presentations to Treasury leadership.
• Maintain the framework cross-map appendix linking OWASP, ASVS, CWE, NIST SP 800-53, and COV SEC530.

• Minimum 6 years of experience in security assessment delivery and oversight.
• Technical expertise in peer reviewing security findings and risk ratings.
• Experience in quality assurance of security assessments and client-facing reports.
• Familiarity with public-sector security reporting standards.

• Relevant security certifications such as CISSP or CISM.

• Must provide independent quality gate and sign-off before any drafts reach Treasury.
• Role requires a senior resource who did not perform the original analysis to maintain objectivity.
• Strict adherence to deliverable format and content standards as mandated by the SOR.

• Standard work schedule with potential for escalation support as second-tier above Project Manager.