Security Specialist, AVP

Royal Bank of Scotland; Bengaluru; On-site; INR 3,500,000 - 7,500,000; Full time

Job summary

Royal Bank of Scotland is seeking a Security Specialist at AVP level to act as a subject matter expert and integrate security early in design decisions. You’ll ensure backlog security implications are understood and help build secure services across the Group.

You will collaborate with agile teams, craft risk policies, and drive automation and observability to protect colleagues and customers while delivering scalable security improvements.

Qualifications

• Experience with risk management frameworks and setting risk appetites.
• Background in defining risk policy controls.

Responsibilities

• Support the wider organisation in building and operating secure services.
• Collaborate with Feature teams and participate in planning and retrospectives.
• Drive cost-effective, value-focused security initiatives across the Group.
• Ensure robustness of security considerations throughout development lifecycle and into support.

Skills

Identity & Access Management

Security architecture

Risk management

DevOps awareness

Tools

PowerShell

Azure DevOps

GitLab

Job description

Join us as a Security Specialist

We're looking for someone to actively support a domain and our wider organisation as a subject matter expert in a security-related field

Day-to-day, you'll be making sure that the security implications of the backlog are understood in the right way to build security early into the design

This is your chance to bring a competitive edge to your career profile by solving new problems and creating smarter solutions and enjoying professional development opportunities

We're offering this role at associate vice president level

What you'll do

In this role, you'll make sure that decisions are based on robust data, return on investment and value measures that demonstrate thoughtful and intelligent cost management. You'll also encourage the identification of ideas and drive the delivery of initiatives that will reduce cost and simplify our Group.

Additionally, you'll work at a domain level to understand and make sure that robust security is continuously considered and incorporated at every stage, programme increment and Feature team delivery throughout the development lifecycle and through to support.

You'll also be responsible for:

• Using your SME knowledge to support the wider organisation in building and operating secure services that protect both our colleagues and customers
• Collaborating with Feature teams and participating in store refinement, sprint planning and retrospective sessions
• Establishing a culture of innovation and strategic thinking that provides our Group with knowledge of the latest developments in your area of specialism
• Making sure any developments in your area of specialism are assessed and the impact on our wider organisation is appropriately communicated
• Building relationships with colleagues across our group and third-parties to make sure decisions are commercially-focused and create long-term value for our organisation

The skills you'll need

To be successful in this role, you'll have experience of, or a willingness to learn, risk management frameworks. You'll also have experience of setting risk appetites and a background in defining risk policy controls. Knowledge of one, or more, security subject areas would also be advantageous.

You'll also need:

• A strong background in Identity and Access Management, with hands-on experience of Microsoft Entra ID, Active Directory, and ADFS
• Experience developing automation solutions using PowerShell and other scripting tools to improve operational efficiency
• A good understanding of CI/CD pipelines and DevOps practices using Azure DevOps, GitLab, or similar technologies
• The ability to support release management activities and operate within established change control processes
• Experience designing and implementing observability solutions, including monitoring, logging, alerting, and operational dashboards
• The ability to integrate identity platforms with both cloud-based and on-premises applications
• A strong understanding of authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP
• Experience working within Agile and DevOps delivery models
• The ability to identify manual processes and transform them into scalable, automated solutions

Hours

45

Job Posting Closing Date

31/08/2026