Cyber Security Assurance & Risk Leader

BT plc; Chippenham; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible working

Training & development

Pension scheme

Share options

Discounts on BT & EE products

25 days annual leave

3 days volunteering a year

Job summary

BT Defence security team seeks an experienced Cyber Security Governance, Risk & Assurance Specialist to support secure design and operations for sensitive customers. This role ensures Secure by Design across cloud, hybrid, and on-prem architectures, with compliance to frameworks and legislation.

You will lead assurance activities, work with engineering, operations, customers and suppliers, perform threat and risk assessments, and embed security from the outset and through-life.

Qualifications

• SC security clearance (minimum) and UK nationality
• Proven track record in security and information risk management
• Understanding of cloud and hybrid security architectures
• Strong network security knowledge (WAN/LAN/WLAN)
• Excellent verbal and written communication skills
• Experience producing security documentation (Security Plans, Security Cases, SyOPs)

Responsibilities

• Provide security leadership for BT Defence
• Shape BT's secure offerings with new tech
• Embed security requirements across projects from outset
• Support sales to plan security deliverables
• Undertake threat and risk assessments
• Apply proportionate security controls from baseline sets

Skills

Security clearance (SC)

Security risk management

Cloud security

Network security (WAN/LAN/WLAN)

Communication (verbal & written)

Security documentation

Job description

BT Defence security team seeks an experienced Cyber Security Governance, Risk & Assurance Specialist to support secure design and operations for sensitive customers. This role ensures Secure by Design across cloud, hybrid, and on-prem architectures, with compliance to frameworks and legislation.

You will lead assurance activities, work with engineering, operations, customers and suppliers, perform threat and risk assessments, and embed security from the outset and through-life.