Senior Security Analyst: DevSecOps & Cloud Security

McKinsey & Company; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

McKinsey & Company is seeking a security professional to act as the security point of contact for the SHaPE Practice within the Tech Ecosystem. You will help drive the Secure Development Lifecycle, DevSecOps, and Cloud security policies across the organization.

You will provide reporting on security compliance, incidents, KPIs and OKRs, and articulate the Practice's priorities back to Tech Ecosystem Leadership, collaborating with colleagues across 65+ countries to strengthen McKinsey's security

Qualifications

• BSc/MSc in Information Security or related technical discipline.
• 3+ years of experience in a similar information security role.
• Experience with cloud offerings such as AWS, Databricks, etc.
• Technical understanding of enterprise IT and cloud-based architectures and technologies.
• Experience defining system boundaries and security/compliance/infrastructure support services.
• Familiarity with GDPR, NIST, ISO 27001, NIST CSF.
• Experience evaluating logging activities for SIEM ingestion.
• Knowledge of security technologies and tooling (vulnerability scanners, firewalls, IAM, SIEM).
• Knowledge of Secure Software Development Lifecycle and DevSecOps.

Responsibilities

• Act as a security point of contact for McKinsey’s SHaPE Practice.
• Drive adoption of the Secure Development Lifecycle, DevSecOps and Cloud security policies.
• Provide reporting on security compliance, incidents, KPIs and OKRs.
• Deliver and represent the priorities of the Practice back to Tech Ecosystem Leadership.

Skills

Information security

Cloud security

DevSecOps

Security monitoring

SIEM

Networking

Education

BSc/MSc in Information Security or related field

Tools

AWS

Databricks

SIEM tooling

Firewalls

Job description

McKinsey & Company is seeking a security professional to act as the security point of contact for the SHaPE Practice within the Tech Ecosystem. You will help drive the Secure Development Lifecycle, DevSecOps, and Cloud security policies across the organization.

You will provide reporting on security compliance, incidents, KPIs and OKRs, and articulate the Practice's priorities back to Tech Ecosystem Leadership, collaborating with colleagues across 65+ countries to strengthen McKinsey's security