Working Hours
Full time 37.5 hours per week – Monday to Friday
Responsibilities
In this role you will carry out the Secure by Design assessments and provide guidance to projects and BAU activities across the following UK business functions:
- Technology
- Finance
- HR
- Corporate & External Affairs
- Business Intelligence
You will engage with the business functions to understand their future roadmaps and will ensure that appropriate Cyber Security engagement takes place to support these roadmaps.
You will also be responsible for providing technical leadership and task direction to other Secure by Design managers, Specialists as well as Cyber Security Champions across Technology and other business functions.
You will work with project teams to produce solutions that comply with internal security policies, standards and the security architecture.
The projects and “business as usual” changes you will be working on will encompass the full range of IT & Digital technologies encompassing:
- Online & Digital including Mobile Applications
- Customer Management & Billing Systems
- Business Intelligence and Big Data
- Business Support Systems
- Cloud Infrastructure & SaaS
- Automation Solutions
- End user computing / BYOD
Embed effective security practices into IT & Digital processes (Agile, DevSecOps, CI/CD etc).
Provide Cyber Security guidance, design input and design review/assessment.
Specify security testing, and ensure that identified vulnerabilities are remediated.
Identify Cyber Security risks and ensure that these are managed effectively.
Lead relevant Regulatory and Compliance initiatives for Secure by Design.
Ensure that projects integrate with security baseline controls such as IPS/IDS, WAF, Firewall Change Management, Identity & Access Management, SIEM and Vulnerability Management.
Ensure internal customers, external suppliers and delivery partners are aware of security standards and future strategy to influence development roadmaps.
Qualifications
- Competent in understanding network designs and equipment configurations used to deliver a wide range of IT and telecommunications solutions.
- Competent in applying security policies and principles defined in security architecture to real world scenarios.
- Understands and applies risk management principles.
- Effective communication skills to influence stakeholders and explain complex security requirements in simple terms.
- Stakeholder Management – established as the go-to person for any project issues impacting on Corporate & External Affairs teams.
Enhanced vetting may be carried out for this role.
#J-18808-Ljbffr…