Cyber Security Governance & Assurance Specialist - ESN

BT Group; Greater London; Hybrid; GBP 60,000 - 75,000; Full time

Job summary

A major telecommunications company is looking for an ESN Cyber Security Governance & Assurance Specialist to enhance security for the Emergency Services Network. This role entails managing security processes, engaging with stakeholders, and ensuring compliance with contractual security obligations. The ideal candidate will have a strong background in security assurance, excellent communication skills, and the ability to work with various security teams. A supportive work culture with numerous benefits is provided, including flexible working arrangements.

Benefits

10% on target annual bonus

BT Pension scheme with 10% contribution

X4 Salary Life Assurance

Flexible benefits like Cycle to Work

25 days annual leave

Equal family leave

Enhanced women's health support

24/7 private virtual GP appointments

2 weeks paid carer's leave

World-class training and development opportunities

Access to retail discounts

Qualifications

• Security assurance experience, including carrying out assurance activities and writing reports and recommendations.
• Experience with ISO 27001 controls and audit.
• Experience of administering security processes.
• Strong stakeholder management skills at a senior level.
• Excellent communication and presentation skills.

Responsibilities

• Contribute to the ESN Security Management Plan, ensuring effective management of security.
• Identify security threats to ESN and ensure adequacy of processes and controls.
• Engage with Customer security teams to provide assurance that Security requirements are met.
• Manage operational risks related to people, information, assets, and reputation.

Skills

Internal & Statutory Security Audit

Stakeholder Management

Security Assurance

Policy Design

Job description

Job Req ID: 52313
Location(s): London, Birmingham, Bristol or Manchester

Why this job matters

The Emergency Services Network (ESN) is a major strategic priority for BT and our commitment to connect for good for our customers and our country. The Security of the ESN is key to our customer and to our Emergency Services users. Availability of the network is a matter of life or death to the Emergency Services, and they have to have confidence in the confidentiality and integrity of their communications and operations. We have to build and maintain effective security controls to prevent and detect a wide range of cyber and physical threats. This role provides assurance that BT internal teams and suppliers have met ESN security requirements.

As a ESN Cyber Security Governance & Assurance Specialist, you will execute a range of workstreams in delivering contributions to the BT Group's, ESN Programme's and the Customer's overall cyber security risk management program, which is designed to ensure that the technology systems and data associated with the ESN are adequately protected. You will be required to undergo National Security Vetting to SC or NPPV level.

What you'll be doing

• Contributing to the ESN Security Management Plan, ISMS and Security Processes - ensuring effective management of security within the Programme and that Contract obligations are met.
• Identifying security threats to ESN and ensuring the adequacy of processes and controls in place to mitigate them.
• Work with other Security professionals and other teams to meet ESN security objectives.
• Engage with Customer security teams, providing assurance that Security requirements are met and identifying opportunities for improvement.
• Identify and understand all elements of contractual security obligations for the ESN Contract.
• Deliver and verify the implementation of end to end security services as defined within specified the ESN contracts.
• Deliver and implement ISO27001 compliant security strategies, policies, procedures, processes, threat identification & responses that provide wrap-around security services and solutions for the ESN service.
• Deliver the required Security accreditation for the ESN contract.
• Manage operational risks related to people, information, assets, revenues and reputation and ensure compliance with relevant security requirements, typically: the HMG Security Policy Framework, Contractual Obligations, company security and business continuity policies.
• Monitor and manage third party supplier compliance to the flow-down of contractual obligations from BT.
• Monitor and manage security awareness within the ESN Programme.

The skills you'll need

• Internal & Statutory Security Audit
• Stakeholder Management
• Security Assurance
• Policy Design

What we would like to see on your CV

• Security assurance experience, including carrying out assurance activities and writing reports and recommendations.
• Experience with ISO 27001 controls and audit.
• Experience of administering security processes.
• Strong stakeholder management skills at a senior level.
• Excellent communication and presentation skills are essential, so experience presenting security guidelines and processes to colleagues and senior audiences would be essential.

Benefits

• 10% on target annual bonus
• BT Pension scheme, minimum 5% employee contribution, BT contribution 10%
• X4 Salary Life Assurance
• Huge range of flexible benefits including Cycle to Work, Healthcare, Season Ticket Loan, Electric Vehicle Salary Sacrifice
• 25 days annual leave (not including bank holidays), increasing with service
• From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It's for all parents, no matter how your family is made up.
• Enhanced women's health support: including help with menopause symptoms, cancer screenings, period care and more.
• 24/7 private virtual GP appointments for UK colleagues
• 2 weeks paid carer's leave
• World-class training and development opportunities
• Option to join BT Shares Saving schemes
• Discounted broadband, mobile and TV package
• Access to 100's of retail discounts including the BT shop

Flexible Working

This role offers a 3 together, 2 wherever working model. This means you are required to be at your contractual location 3 days a week with 2 flexible days per week.

A FEW POINTS TO NOTE

Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch. We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.