Senior Specialist, Agile Security and Risk Management Assessment

TN United Kingdom; Ipswich; On-site; GBP 50,000 - 90,000; Full time

Job summary

Ein etabliertes Unternehmen sucht einen erfahrenen Security Consultant zur Verstärkung des Teams für Projekt-Risikoanalysen. In dieser Schlüsselrolle sind Sie verantwortlich für die Durchführung von Risikoanalysen, die Sicherstellung der Sicherheitsanforderungen während des gesamten Projektzyklus und die Zusammenarbeit mit verschiedenen Stakeholdern. Sie werden die Möglichkeit haben, Ihre analytischen Fähigkeiten und Ihr Wissen über Informationssicherheit in einem dynamischen Umfeld einzusetzen. Diese Position bietet Ihnen die Chance, an innovativen Projekten zu arbeiten und einen bedeutenden Einfluss auf die Sicherheitsstrategie des Unternehmens zu haben.

Qualifications

• Bachelor-Abschluss in Informatik oder verwandtem Bereich mit umfangreicher Berufserfahrung.
• Erfahrung in der Durchführung von technischen Risikoanalysen für Informationssicherheit.

Responsibilities

• Durchführung von Risikoanalysen und Sicherstellung der Einhaltung der Sicherheitsanforderungen.
• Überprüfung und Feedback zu Projektunterlagen und Sicherheitsanforderungen.

Skills

Projekt-Risikoanalysen

Information Security Risk Assessments

ISO 27005

Analytische Fähigkeiten

Kommunikationsfähigkeiten

Detailgenauigkeit

Education

Bachelor in Informatik oder Ingenieurwesen

Tools

Microsoft Office

Job description

Social network you want to login/join with:

Senior Specialist, Agile Security and Risk Management Assessment, Ipswich

Client:

AXA Group

Location:

Job Category:

Finance

EU work permit required: Yes

Job Reference:

1f588fc845ee

Job Views:

3

Posted:

05.05.2025

Expiry Date:

19.06.2025

Job Description:

Security Consultant – Project Risk Assessments

The Secure Project Lifecycle process has been established to perform risk assessments, ensuring security is considered as part of the design and throughout the project lifecycle. The SPL process governs projects within the Planview time recording and management system and those managed outside such as Move to the Cloud (MttC) programme.

The role will be to augment the Information Security team to perform risk assessments of projects, provide guidance, and acquire outcomes/decisions from the project manager, enterprise architect, technical architect, solutions architect, data privacy officer, project management office, strategic change development, IT Infrastructure and Operations, and penetration testers.

Discover your opportunity

The specialist will work under the responsibility of the Head of IS Services and Risk Management and will report to the Secure Project Lifecycle Team Lead. The responsibilities include:

• Review submission of IS Criticality Assessment (ISCA) questionnaire (ISCA Dashboard)
• Determine high-level security requirements and project criticality, based on standard project activities and data classification from DP pre-screening
• Work with assigned architect to ensure security requirements are finalized in design (High Level Design), review with Enterprise Architecture, Solutions Architecture, Cyber Security, and Cyber Assurance
• Review of all security requirements and evidence provided by the project manager to support closure of each requirement: Review and feedback on ISCA questionnaire, review and feedback on High Level Design (HLD), present at ISCA Project Technical Review, obtain sign-offs from various authorities, liaise with Cyber Assurance on penetration testing, obtain compliance reports, and produce Project Security Assessment closure report.
• Perform a final review of all open security requirements before stage gate approval, ensuring AXA SDLC processes are followed.
• Store all evidence in IS projects shared area.
• Update the project register daily and the Project Security Assessment (PSA) template, submit PSA for sign-off.
• Manage project RAG status, highlight trending issues to management and project manager.
• Liaise with project manager to support risk acceptance development.
• Attend meetings with stakeholders, challenge design decisions, escalate issues, and offer resolution options.

All deliverables are subject to internal quality assurance and peer reviews by the Information Security team.

We’re looking for someone with these abilities and skills:

• Bachelor’s degree in computer science, Engineering, or related field with senior professional experience
• Established knowledge of performing project risk assessments
• Experience in performing Information Security technical risk assessments
• Proficient in information security risk and governance frameworks (ISO 27005, EBIOS)
• Expert analytical and reporting skills
• Expert in Microsoft Office (Word, Excel, PowerPoint, Access)
• Effective communication and stakeholder influence skills
• Attention to detail and presentation skills
• Information Security and/or IT industry certification (CISSP, CISM, CRISC, GIAC, or equivalent)
• Experience in articulating IS risks in business language and advising on risk management
• Experience in security management reporting and methodologies
• Experience in multinational companies (Preferred)

Find your future

AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. We provide re/insurance for mid-sized companies, multinationals, and individuals, reinventing insurance through innovation, data, technology, and talent.

Our approach combines a comprehensive capital platform, data insights, leading technology, and an inclusive workspace to deliver top client service across various lines of business including property, casualty, professional, financial, and specialty.

We partner with those who move the world forward with an innovative and flexible approach to risk solutions.