Cyber Delivery Assurance Lead

Hays.; Hounslow; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Cyber Delivery Assurance Lead to enhance security measures across various domains. In this pivotal role, you will collaborate with senior stakeholders and ensure that product delivery aligns with the company's risk appetite. Your expertise in cyber security controls and frameworks will be crucial in embedding security by design within the organization. You will lead initiatives to manage risks effectively while promoting awareness and compliance with regulatory requirements. If you are passionate about cyber security and thrive in dynamic environments, this role offers an exciting opportunity to make a significant impact.

Qualifications

• Broad technical knowledge of cyber security controls.
• Ability to undertake threat and risk assessments.

Responsibilities

• Provide assurance that product delivery meets risk appetite.
• Engage with Cyber Security Office for best practices.

Skills

Cyber Security

Stakeholder Management

Risk Assessment

Threat Assessment

Change Management

Education

CISSP

ISO27001 Lead Implementor

SANS GIAC

Tools

NIST framework

PCI DSS

GDPR

NIS

Job description

The role: Cyber Delivery Assurance Lead
Join our team as a Cyber Delivery Assurance Lead, where you'll play a pivotal role reporting to the Head of Cyber Delivery Assurance. Collaborating closely with Digital Delivery leadership and teams, the Cyber Team, and the Cyber Security Office, you'll oversee multiple domains or tribes, ensuring effective assurance processes and embedding security within our operations.

What you'll do:
•Provide assurance to the Head of Cyber Delivery Assurance that product delivery and maintenance meet the company's risk appetite and that controls are operating effectively.
•Successfully embedding security by design with proportionate appropriate cyber controls aligned to risk.
•Senior stakeholder management (negotiation and influencing) across multinational organisations, including third-party suppliers and delivery partners.
•Take full responsibility for the secure delivery of programmes, by assisting the product team by interpreting and embedding Cyber Security policies, standards, guidelines and procedures into an agreed framework against all product team deliverables.
•Engage proactively with the Cyber Security Office (CSO) project assurance and architecture functions, ensuring consistency and best cyber practice are adhered to.
•Provide authoritative advice and guidance on the application and operation of all types of security controls, including legislative or regulatory requirements.
•Advise users on risk management and reduction and promote awareness in conjunction with cyber awareness programmes

What you'll bring:
•Ability to undertake threat and risk assessments across varied technology stacks, identifying suitable mitigating controls.
Demonstrates clear leadership and an ability to communicate, influence and persuade across the organisation at senior levels, leading by example and aligning stakeholder groups around a common vision.
•Initiates and manages change to help secure the future direction of the company.
•Prioritisation across multiple products, based on overall product team structure and delivery strategy.
•Strong ability to work under pressure in a changing environment. Key enablers Enabling company to embed security by design. Supporting active risk management. Key performance indicators

Your experience:
•Broad technical knowledge of cyber security controls is demonstrated by the attainment of appropriate qualifications, e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent
•Knowledge of the NIST framework, PCI DSS, GDPR and NIS as well as NCSC cyber guidance.
•Experience working in an agile delivery environment would be highly advantageous.
•Specific cyber knowledge and demonstrable experience in at least one of the following areas: Cloud security, network security, digital security (multi-platform), infrastructure security, security by design, security architecture
•Experience working in a regulated environment with specific cyber requirements that require interpretation and application.

#4665914 - Nasar Ali