Security Operations Specialist
Role details
Job location
Tech stack
Job description
We are looking for a Security Assurance Specialist to join the Information Security Assurance Team, who provide end-to-end assurance of IT products and services across the group.
The role will require excellent IT (systems, networks, applications, hardware) and security technology knowledge (anti-malware, encryption, security logging and monitoring, network security), as well as knowledge of information governance principles (risk, legislation, standards, policy and procedures).
Responsibilities:
-
Work closely with delivery & operational teams, providing end to end engagement across a range of IT focused projects and products.
-
Assure required levels of due diligence, risk assessments and security design across a portfolio of projects.
-
Define security non-functional requirements for new products and services.
-
Review and input to various design documents (HLD, LLD, data flow diagrams etc.) to ensure that Security NFRs are delivered and implemented before the product or service goes live.
-
Provide advice as a technical security SME by representing the Information Security team at various project meetings or workshops.
-
Providing project consultation on various compliance frameworks which currently apply to the business e.g. NIST, PCI, SOX and GDPR.
-
Coordinating between projects, Security Operations and third-party vendors to ensure that security testing activities are carried out and delivered to a pre-agreed scope.
-
Responsible for ensuring that any vulnerabilities identified are processed in accordance with the Information Security Risk Management process.
-
Identify and track risk issues across the project and ensure the risk management lifecycle is followed.
-
Ensure that new products or services follow the correct change management process and provide advice to the Change Approval Board where appropriate.
-
Provide support to security incident management and compliance services when required.
-
Work with key stakeholders across security and the business provide risk analysis of vulnerabilities, identify appropriate security controls and review and approve remediation activities.
-
Support the wider Information Security & Risk team evolve and embed key governance artefacts and processes such as effective risk management and the development of policy & procedures.Communicate and educate security risk to technical and non-technical colleagues., Proven AI Cyber Security Consultant role available for an individual who has deep AI and Security Assurance and Governance experience. You will act as an AI Security Consultant to support our client in providing them with real-time support in keeping their national..., Security Consultant - £300 per day - Outside IR35 - Remote (UK based candidates only) Cyber Essentials Plus Assessor Contract | UK-Based | Immediate Requirement We are supporting a client with an urgent requirement for an experienced IASME-qualified Cyber Essentials Plus..., We're looking for an experienced SAP Security & Compliance Engineer to join our SAP Platform Enablement team. In this hands-on role, you'll design, build, and support security and authorisation solutions across a multi-system SAP landscape - ensuring our environment stays..., Senior Anaplan Consultant | UK (Remote) This an exciting opportunity to join an Anaplan Partner delivering high-quality, scalable planning solutions to a diverse client base. This role is ideal for someone who enjoys working closely with senior stakeholders and..., Role: Sustainability Consultant - BREEAM Assessor (Contract role) Consulting Seniority: Consultant - Manager Day rate: TBC and Outside IR35 Project duration: 1-3 months (rolling projects) Location: Remote with UK working hours We're supporting a global construction and...
Requirements
- IT related degree or similar experienceCISSP or CISM (or equivalent professional certification)
Knowledge/ Experience - essential:
-
Provision of Security Non-Functional Requirements against a project design
-
Excellent knowledge of key compliance and control requirements relevant to the tourism & leisure industry (e.g. SOX, PCI DSS & GDPR)
-
Extensive experience securing AWS-hosted environments and implementing cloud security best practice
-
Hands on experience of key security tools and their application within Information Systems
-
Application/web application security and management
-
Experience of implementing information security best practices within a regulated environment
-
An excellent working knowledge of National Institute of Standards and Technology Cyber Security Framework
-
Knowledge and skills to manage Penetration Testing processes
-
Understanding of IT concepts and architectures including Cloud, BYOD and Mobile Device Management
-
Working knowledge of different delivery methodologies (Waterfall, Agile or Hybrid)
Knowledge/ Experience - desirable:
-
Knowledge of HTTP, SSDLC and Security Testing.
-
Broader understanding of Information Security Management Systems and controls, i.e. ISO27001
-
Strong risk management knowledge and experience., Security Assurance Co-Ordinator - Secure by Design (SBD) Location: Andover/M4 Corridor (as required) Contract Type: Contract (Outside IR35) Clearance: DV Cleared Role Overview We're working with an IT Consultancy who are looking for a proactive and detail-oriented..., Job Description Senior/Principal EIA Consultant Southampton, Bristol, Corsham, Birmingham and Lewes, United Kingdom Do you want to push the boundaries of your profession and develop your excellence in an open, collaborative and empowering culture? Are you motivated by..., Southampton, Bristol, Corsham, Birmingham and Lewes, United Kingdom Do you want to push the boundaries of your profession and develop your excellence in an open, collaborative and empowering culture? Are you motivated by creating sustainable change that benefits society..., Job Description SAP SuccessFactors Employee Central Senior Consultant - £673 per day inside IR35 - Hybrid remote 70% onsite (Whiteley, Southampton) 30% Skill: SAP SuccessFactors Employee Central Senior Consultant - At least 10 to 15 years of strong hands on in SAP...
Benefits & conditions
Cyber Security Analyst Location: Andover, Hampshire Shift Pattern (Day/Night) Security Clearance: SC clearance required, UKEO Job Type: Permanent | Competitive Salary + On Call/Shift Allowance Are you ready to step up in a dynamic, high-performance security operations...