Director of Security Design Engineering Assurance

LG Technology Ltd
London
9 months ago
Applications closed

Related Jobs

View all jobs

Cyber Security Engineer

IAM Security Engineer III

Infrastructure & Security Engineer

Cyber Security Consultant

Head of Security Architecture

Security Architect - M365

ABOUT US

We’re building Tomorrow’s Connections Today, bringing people together through the power of our technology.

Liberty Global is a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.

With our investments in fibre-based and 5G networks we play a vital role in society, currently providing over 85 million fixed and mobile connections and rolling out the next generation of products and services, while readying our networks for 10 Gbps and beyond.

We’re creating national champions, combining the best broadband and mobile networks under brands such as Virgin Media-02 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Sunrise in Switzerland, Virgin Media in Ireland and UPC in Slovakia.

Liberty Global Ventures, our global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure, including strategic stakes in ITV, Univision, Plume, Lionsgate and the Formula E racing series.

Our scale enables us to transfer knowledge and expertise across our operations and investments, creating a dynamic family of brands united in the pursuit of innovation and excellence.

And we’re prioritising diversity, equity and inclusion in our workplace and communities, while reducing our impact on the environment. We are using technology as a force for good; for our people, our partners and the planet.

JOB PURPOSE

The Director of Security Design Engineering Assurance will oversee and manage security design project assurance activities across all product and technology stacks at Liberty Global and its respective operating companies. This role ensures that all new products and service solutions, including changes to the existing portfolio, are designed, implemented, and tested with robust security controls from the inception phase.

The position involves managing multi-functional teams, driving security design review initiatives (including project risk assessments, control design reviews, and penetration testing), and ensuring adherence to security standards in various development environments.

The ideal candidate must demonstrate exceptional business insight, stakeholder management skills, and the ability to deploy consulting and influencing skills effectively. This is a critical role for us and requires a strong, experienced, highly motivated, and knowledgeable individual with extensive leadership skills and experience operating in a complex, global matrix organization.

KEY ACCOUNTABILITIES

Leadership and Management:

Lead and manage a team of experienced security design assurance professionals. Provide coaching and direction to senior managers and team members throughout the lifecycle, including risk mitigation discussions and service portfolio improvements. Build relationships and collaborate with senior leaders and professionals across the group and in operating companies to provide quality security services. Collaborate with other security leadership teams on strategy, architectures, security operations, and the information security group to integrate and deliver quality services across the business. Act as the service owner with end-to-end responsibility for provisioning, delivery, and ongoing improvements to services.

Security Design Assurance:

Oversee the end-to-end security project assurance lifecycle, covering security design reviews across the design, build, and test lifecycle for all aspects of product and technology solutions. This includes corporate networks, access/core networks, data centers, business applications, mobile platforms, multi-cloud environments (AWS/GCP/Azure), continuous integration and delivery (CI/CD), and data platforms. Ensure all proposed solutions meet security standards, baselines, and architecture patterns, and follow relevant regulations. Identify control gaps and facilitate discussions with product/business owners to implement interim compensatory measures and risk management processes. Manage DevSecOps pipelines, including risk assessments, triaging, tool onboarding, developer feedback, and ongoing service management to ensure continuous delivery. Oversee multi-cloud build-out/operations, control codifications, cloud posture management, and ongoing operations support to ensure proper implementation of cloud architectural baseline controls. Coordinate regular and annual penetration testing projects as per the agreed scope with business and information security teams. Support process improvements across the lifecycle, from engagement registration to risk assessments, control selection, and testing. Participate in special projects related to M&A on a need-to-know basis.

Service Delivery and Improvements:

Deliver security project design assurance across various development methodologies. Coordinate with project managers and technical teams to ensure timely and secure project delivery, providing feedback on review outcomes and themes. Collaborate with the security engagement director and business product owners to understand business product roadmaps. Prepare a service improvement plan, including resource and capacity management, to effectively deliver security services. Develop service reporting metrics, key performance indicators and SLAs, and produce ongoing reports on the performance of each service for the business. Foster a culture of security awareness and continuous improvement in risk assessment, triaging, and delivery processes.

Collaboration and Communication:

Work closely with Corporate IT, entertainment and connectivity platforms, Core network teams and operations teams to represent the function and embed security into the design and architecture of new solutions. Represent group security in various steercos and governance forums and demand planning activities.

Compliance and Standards:

Ensure compliance with industry standards and regulatory requirements. Support development of security policies, procedures, and standards across group security. Stay updated with the latest security threats, technologies, and regulatory changes.

KNOWLEDGE & EXPERIENCE

Extensive experience in information security or security assurance or security engineering and design, or security architecture with at demonstrable experience in a leadership role. Proven experience in security reviews across networks, applications, mobile, and cloud environments. Strong background in implementing security controls in both agile/DevOps and waterfall frameworks. For Agile/DevOps methodology its important to have prior implementation and delivery of security scanning service using tools like SAST/DAST/SCA etc. In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, OWASP). Prior experience with penetration testing and vulnerability management. Demonstrable security risk management knowledge and experience. Experience as acting as a change agent, driving continuous improvement and excellence. Ability to operate at multi leadership levels and with both technical and non-technical audiences. Experience in operating as a service provider to multiple global enterprise organisations including highly regulated organisations. A deep and fundamental knowledge of information security management that will ensure immediate respect among multiple internal and external partners. Demonstrable experience of working in a team-oriented, collaborative environment, with a strong focus customer service. Solid team player and able to work with indirect and direct diverse teams.

Essential skills & abilities:

Highly self-motivated and directed with an ability to make sound and logical judgments. Demonstrable leadership and personnel/project management skills. Ability to prioritize and complete tasks in a high-pressure environment and make sound decisions in emergency situations. Proven analytical and problem-solving abilities, able to conduct research into issues and products as required. Outstanding oral and written communication skills and leadership qualities in order to ensure agreement across the organisation, especially on difficult/contentious issues.

PREFERRED EDUCATION/ QUALIFICATIONS:

Degree in computer science, Information Security, or a related field or equivalent experience Relevant certifications such as CISSP, CISM are highly desirable.

Benefits:

Competitive salary + Eligibility for our Bonus Plan 25 days annual leave with the option to purchase 5 more 3 Days of Volunteering Time Off Free access to LinkedIn Learning & Coursera to continue to develop and grow your career with us Free premium subscription to Calm Company Laptop, Mobile and Phone Subscription Company Pension Contributions Access to our car benefit scheme Access to personal medical and dental insurance Access to discounts on superfast fibre broadband subscriptions

Liberty Global is an equal opportunity employer. We embrace diversity and are committed to creating an inclusive environment for our people. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process. We’re 100% committed to having a workforce that represents every part of our society. So we’re keen to hear from candidates of all background and circumstances.

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Contract vs Permanent Cybersecurity Jobs: Which Pays Better in 2025?

Cybersecurity has become one of the fastest-growing and most crucial fields in modern business. With high-profile breaches dominating headlines and the ongoing digital transformation exposing organisations to new threats, companies across the UK are competing to attract skilled cybersecurity professionals. Roles range from penetration testers (pen testers) and SOC (Security Operations Centre) analysts to compliance officers, cloud security architects, threat intelligence analysts, and CISOs (Chief Information Security Officers). As demand continues to surge, cybersecurity salaries have climbed accordingly, and businesses have turned to more flexible hiring practices. Alongside permanent employment, many professionals explore short-term day‑rate contracting or fixed-term contracts (FTCs), searching for the ideal balance of pay, job security, and growth opportunities. Which arrangement truly pays better in 2025—and which best aligns with your ambitions? In this article, we dive into the contract vs. permanent debate with a focus on cybersecurity roles. We will examine the current market, the structure of day‑rate vs. FTC vs. permanent positions, the pros and cons of each, and some hypothetical pay comparisons. By the end, you should have a clearer sense of which career path might suit your situation and goals—whether you are a seasoned specialist aiming for top rates, or an up-and-coming analyst seeking a stable environment to develop in.

Cyber Security Jobs for Non‑Technical Professionals: Where Do You Fit In?

Defence Needs More Than Hackers in Hoodies When headlines warn of ransomware crippling hospitals or deepfakes swaying elections, we picture hoodie‑clad hackers and elite penetration testers. Yet the reality of the UK’s cyber security sector is broader—and desperately short of talent. The Department for Science, Innovation & Technology (DSIT) estimates a shortfall of 11,200 cyber security professionals in 2024, while 43 % of advertised roles require governance, risk or communication skills rather than hands‑on technical exploits. Put plainly: if you can guide policy, manage projects, interpret regulations or inspire behaviour change, cyber security wants you. This guide highlights the fastest‑growing non‑technical roles, the transferable skills you already possess, and a concrete 90‑day plan to land a cyber security job—no packet sniffers required.

BAE Systems Cybersecurity Jobs in 2025: Your Complete UK Guide to Protecting Governments, Businesses and Critical Infrastructure

From securing the Royal Navy’s new Dreadnought submarines to foiling multimillion‑pound fraud rings, BAE Systems Digital Intelligence (DI)—formerly Detica—sits at the sharp end of global cyber defence. Head‑quartered in Guildford with hubs in Gloucester, Leeds and London, the 5,500‑strong DI business delivers threat‑intelligence platforms, secure‑by‑design software and 24/7 SOC services to government and commercial clients worldwide. With escalating ransomware, AI‑driven disinformation and complex supply‑chain threats, BAE plans to expand its UK cyber workforce by 20 % in 2025. Whether you’re a graduate passionate about reverse engineering, a DevSecOps engineer who loves IaC, or an incident‑response pro comfortable in high‑side environments, this guide explains how to land a BAE Systems cybersecurity job in 2025.