Senior Security Engineer

Inside IR35

Hybrid working

JOB PURPOSE

Provide SME input to in-flight IT and Business projects to embed security requirements, manage risks and enable security by design. Experienced of Endpoint for Defender, App Locker & Azure.

RESPONSIBILITIES

Liaise with project stakeholders as an Information Security SME throughout the project lifecycle, including representing the Information Security Advisory team at stage gate meetings.

• Perform security risk assessments against projects to determine control requirements and track and report on security requirements levied on projects/initiatives through to successful implementation
  
• Develop security-related project artefacts/patterns to support consistent security input to projects.
  
• Perform controls validation to ensure that any initial requirements were implemented as expected.
  
• Identify and document any residual risks and engage with the Information Security Risk team to ensure these are tracked and managed.
  
• Work collaboratively with the wider Information Security function, Enterprise Architecture & Service Transition team to ensure a consistent approach to embedding security into projects.
  
  PERSONAL PROFILE
  MANDATORY:
  
• Relevant academic or industry relevant qualifications such as CISSP, CISM
  
• Experience and knowledge of Information Security processes & technologies spanning networks, applications, mobile devices and web related technologies (web applications, web services, service orientated architectures)
  
• Demonstrable security architecture background
  
• Familiar with secure system development processes
  
• Strong verbal & written communication skills
  
• Strong interpersonal skills
  
• Strong analytical and problem-solving capabilities
  
• Capable of working in a team or unsupervised to the same level of quality.
  
  DESIRABLE:
  
  Commercial experience as a IT Security Consultant
  
• Hands on administration/operations experience
  
  ersg are an equal opportunities employer; we are committed to promoting equality of opportunity for all job applicants. We do not discriminate against applicants on the basis of age, sex, race, disability, pregnancy, marital status, sexual orientation, gender reassignment or religious background; all decisions are based on merit