JOB PURPOSE
Looking for a Senior Security Engineer with experience into MS Azure background – Microsoft Defender for Endpoint and Applocker .
Provide SME input to in-flight IT and Business projects to embed security requirements, manage risks and enable security by design.
RESPONSIBILITIES
• Liaise with project stakeholders as an Information Security SME throughout the project lifecycle, including representing the Information Security Advisory team at stage gate meetings.
• Perform security risk assessments against projects to determine control requirements and track and report on security requirements levied on projects/initiatives through to successful implementation
• Develop security-related project artefacts/patterns to support consistent security input to projects.
• Perform controls validation to ensure that any initial requirements were implemented as expected.
• Identify and document any residual risks and engage with the Information Security Risk team to ensure these are tracked and managed.
• Work collaboratively with the wider Information Security function, Enterprise Architecture & Service Transition team to ensure a consistent approach to embedding security into projects.
PERSONAL PROFILE
MANDATORY:
• Relevant academic or industry relevant qualifications such as CISSP, CISM
• Experience and knowledge of Information Security processes & technologies spanning networks, applications, mobile devices and web related technologies (web applications, web services, service orientated architectures)
• Demonstrable security architecture background
• Familiar with secure system development processes
• Strong verbal & written communication skills
• Strong interpersonal skills
• Strong analytical and problem-solving capabilities
• Capable of working in a team or unsupervised to the same level of quality.