Overview
The Cyber Security Specialist will play a pivotal role within the cyber security team, providing expert advice and guidance to support digital transformation projects. Working in a hybrid model, the specialist will address cyber security and risk management throughout the service lifecycle, engaging with both internal stakeholders and third-party suppliers to ensure secure project delivery.
Responsibilities
- Monitor and assess the current cyber threat landscape and industry best practices.
- Support scoping and risk assessments for change projects.
- Interpret security accreditation requirements to define security needs.
- Adapt cyber security standards for specific projects.
- Conduct threat modelling and risk assessments.
- Review design documents from solution architects for security compliance.
- Coordinate independent penetration testing efforts and provide recommendations.
- Deliver accurate security-related documentation for product delivery.
Requirements
- Proven experience in security and risk assessment within enterprise-scale digital services.
- Demonstrated background in contributing to the security of new digital services.
- Strong ability to collaborate effectively within agile project teams.
- Capability to independently manage work and oversee security considerations throughout projects.
- Experience with security protocols for Azure-hosted environments and applications.
- Familiarity with various security products and testing methodologies (e.g., SAST, DAST).
- Effective communication skills for making evidence-based recommendations.