Security Design Consultant

Lloyds Banking Group; United Kingdom; Hybrid; GBP 73,000 - 85,000; Full time

Job summary

Lloyds Banking Group is seeking a Security Design Consultant in the UK to design secure solutions and document controls. You will deconstruct architectures, perform threat and risk assessments, and communicate complex concepts to diverse stakeholders.

In this hybrid role, you will contribute to security across multiple projects, aligning with industry standards and security best practices while supporting Lloyds’ secure operating environment for millions of customers.

Qualifications

• Ability to develop, design secure solutions and produce a Security Design documenting the controls.
• Ability to deconstruct a solution / network architecture.
• Identify and mitigate threats and vulnerabilities for proposed solutions using standard practices (e.g., STRIDE, MITRE).
• Interpret threats into Risks to help the business assess likelihood and impact.
• Communicate technical concepts to technical and non-technical collaborators.
• Produce and articulate Security Designs to all stakeholders within the project.
• Weigh the risks and benefits of different Security design options.
• Able to work on multiple challenging projects simultaneously.

Skills

Security design

Threat modeling

Architecture analysis

Risk assessment

Technical communication

Security design docs

Multi-project delivery

Cloud environments

Job description

JOB TITLE: Security Design Consultant

SALARY: £72,702 - £85,000

LOCATION(S): Edinburgh, Leeds, Manchester or Bristol

HOURS: Full-time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week currently, or 40% of our time, at our office locations.

About this opportunity

Our Security Consultancy and Design team are continuing their search for Cyber Security Consultants who have a broad knowledge of Cyber Security domains and controls working across a wide range of computing platforms. Join our Chief Security Office here at Lloyds Banking Group as we build the bank of the future.

Are you someone who wants to be in the heart of Cyber Security delivering change and working in an agile way? Interested in being a part of shaping our Security Strategy? We have the perfect opportunity for you.

Actively welcoming enthusiastic Cyber Security Professionals from all industries and backgrounds to join a growing team starting an exciting journey. The opportunity exists to ensure security is developed across our change portfolio.

Cyber Security sits at the heart of our business providing the Group with a secure operating environment, safe from malicious attacks. It is a dynamic and constantly evolving world where your experience and efforts can deliver tangible results to the safety of a huge company and over 30m customers.

We're on the mission to build the bank of the future, and we need your help to do it!

Why Lloyds Banking Group

Like the modern Britain we serve, we're evolving. Investing billions in our people, data, and tech to transform the way we meet the ever-changing needs of our 26 million customers. We're growing with purpose. Join us on our journey and you will too.

What you'll need

• Ability to develop, design secure solutions and produce a Security Design documenting the controls.

• The ability to deconstruct a solution / network architecture.

• Ability to identify and mitigate against threats and vulnerabilities associated with proposed solutions and evaluate the soundness of solutions using industry standard practices (e.g., STRIDE, MITRE)

• Demonstrate the ability to interpret threats into Risks, using your knowledge and experience to assist the business in assessing likelihood and impact.

• Effectively communicate technical concepts to both technical and non-technical collaborators.

• Skills to produce and articulate Security Designs to all stakeholders within the project and business.

• Comfortable weighing the risks and benefits of competing Security design options.

• Comfortable working on multiple challenging projects simultaneously.

Any experience of these would be really useful

• Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP

• Certifications in Security Management such as CISSP / CISM / CCSP or equivalent

• Certifications in technical Security domains such as CEH / OSCP or equivalent

• Experience of Public and or Private cloud environments.

About working for us

Our focus is to ensure we're inclusive every day, building an organisation that reflects modern society and celebrates diversity in all its forms. We want our people to feel that they belong and can be their best, regardless of background, identity, or culture. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a dedicated Working with Cancer initiative. And it's why we especially welcome applications from under-represented groups. We're disability confident. So, if you'd like reasonable adjustments to be made to our recruitment processes, just let us know.

We also offer a wide-ranging benefits package, which includes:

• A generous pension contribution of up to 15%

• An annual performance-related bonus

• Share schemes including free shares.

• Benefits you can adapt to your lifestyle, such as discounted shopping.

• Generous holiday allowance, with bank holidays on top

• A range of wellbeing initiatives and generous parental leave policies

Want to do amazing work, that's interesting and makes a difference to millions of people? Join our journey.