Security Assurance Lead - Secure by Design Partner

Motability Operations Ltd; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Motability Operations Ltd is seeking a Security & Governance Engineer to partner with the Sustainability & Business Change programme, embedding security into design, development and operations. You will act as the primary security contact for SBC initiatives, guiding risk-based decisions and maturing the Information Security Front Door.

You will work with delivery teams to define security requirements, perform threat modelling, engage in security reviews and coordinate remediation with

Qualifications

• Proven experience in cyber security with consulting, app security or security engineering.
• Experience partnering with delivery teams to provide security guidance throughout lifecycles.
• Strong communication and stakeholder management across technical and business audiences.
• Ability to balance competing priorities while handling multiple projects.

Responsibilities

• Act as the embedded security contact for the SBC programme and provide risk-based guidance.
• Embed security requirements in design, implementation and operation.
• Lead threat modelling workshops and produce DFDs and STRIDE assessments.
• Coordinate penetration testing activities and track remediation plans.
• Assess implementation plans and architectures for secure delivery without impacting delivery timelines.
• Collaborate with AppSec, CloudSec and platform teams to address cloud and application security.

Skills

Security consulting

Threat modelling

Security engineering

Cloud security (AWS/Azure)

Security governance

Stakeholder management

Secure by Design

Penetration testing coordination

Job description

Motability Operations Ltd is seeking a Security & Governance Engineer to partner with the Sustainability & Business Change programme, embedding security into design, development and operations. You will act as the primary security contact for SBC initiatives, guiding risk-based decisions and maturing the Information Security Front Door.

You will work with delivery teams to define security requirements, perform threat modelling, engage in security reviews and coordinate remediation with