Security Assurance Lead: Delivery Security Partner

Motability Operations Limited; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual discretionary bonus

15% pension (non-contributory)

Life assurance

Employee Discount Scheme

Electric/Hybrid Salary Sacrifice

Cycle to Work Scheme

20+ days leave?

Job summary

Motability Operations is seeking a Security & Governance Engineer within the Information Security function. You will be the embedded security contact for the Sustainability & Business Change Programme, working with delivery squads to embed security through design, implementation and operation of technology.

Reporting to the Security Team Lead and SBC Programme Manager, you will provide risk-based security guidance, conduct threat modelling, coordinate penetration testing, and help mature Front

Qualifications

• Proven experience in cyber security with security consulting, application security, product security or security engineering.
• Experience partnering with delivery teams to provide security guidance through project lifecycles.
• Excellent communication and stakeholder management across technical and business audiences.

Responsibilities

• Act as the primary Information Security contact for SBC projects, providing security consultancy enabling delivery & governance.
• Build trusted relationships across Technology and the business, offering risk-based security advice throughout the project lifecycle.
• Support Business Analysts and delivery teams in defining security activities and embedding Secure by Design principles from early stages.
• Operate and mature the Information Security Front Door and coordinate security services across the organisation.
• Facilitate threat modelling workshops, produce DFDs and carry out STRIDE-based assessments.
• Conduct security assurance activities including architecture reviews and security hardening.
• Prioritise and close findings from threat models and assurance activities.
• Coordinate penetration testing and track remediation with technical teams.
• Assess implementation plans and solution architectures, balancing security with delivery and operations.
• Collaborate with AppSec, CloudSec and delivery teams on AWS/Azure security considerations and engage specialists as needed.
• Work with Security Operations, Identity and other teams to deliver consistent security outcomes across programmes.

Skills

Security consulting

Application security

Security engineering

Threat modelling

Data Flow Diagrams

STRIDE

Penetration testing

Cloud security

AWS

Azure

CI/CD

Secure by Design

Job description

Motability Operations is seeking a Security & Governance Engineer within the Information Security function. You will be the embedded security contact for the Sustainability & Business Change Programme, working with delivery squads to embed security through design, implementation and operation of technology.

Reporting to the Security Team Lead and SBC Programme Manager, you will provide risk-based security guidance, conduct threat modelling, coordinate penetration testing, and help mature Front