Security Controls Consultant - Tech Sector

Security Controls Consultant - Tech Sector

Location:- Remote working with access to the Manchester area

Salary:- to £70k + Bonus + Bens

Environment:- Security Controls, Technology, Telecoms, Cloud, Cyber Security, Subject matter Expert on Security Controls, NIST, CISSP, Security Threat Modelling, Risk, Policy Breaches.

My client, a fast paced provider of telecoms and managed services is looking to recruit a Security Subject Matter Expert to their team in the way of Security Controls.

The team is split across Security Operations, Application Security and Security Architecture and together they protect the company's networks, its products and their customers.

Day to day duties include:-

• Act as subject matter expert regarding security controls.
• Develop and deliver effective and efficient security controls. Ensuring we are keeping up with the threats faced by a European Communications provider.
• Provide technical security and threat management expertise to projects and programmes within the company. Acting as a guide and security lead to other technical teams within the business. Understanding security challenges faced and proposing workable solutions.
• Ensure the most up to date technical security practices are being used, taking into consideration the wide technology stack in place.
• Develop and embed technical security standards and runbooks, driving consistent practices and responses.
• Each Security professional will have ownership of:

A specific set of security controls, they will be expected to manage the programme and ensure it matures and develops over time.

A specific set of DevSecOps responsibilities to work with product development teams.

Key Relationships:

• Manage security relationships with the Operational, Architecture, Development, Engineering and Design teams. Influencing output wherever necessary.
• Support customer bid teams by sharing knowledge of the company's security controls.
• Support the Chief Architect with relevant industry body relationship management.
• Ensure active participation with the wider security industry, nurturing relationships to share learning and best practice with each other.

Knowledge, skills, and abilities:-

• Demonstrable knowledge of technical security controls, including their drawbacks.
• Facilitate the detection of internal policy breaches and unauthorised internal activity.
• Ability to define and deliver security controls within a complex technical network.
• Drive the continuous improvement of security related processes and procedures.
• Understanding of the telecommunications industry, threats faced, and remediation actions required.
• Understand technical threat modelling, vulnerability identification and related remediation management
• Understanding of risk-based decision making.
• Ability to explain complex technical items to non-technical stakeholders to influence outputs.
• Ability to make choices and drive action when faced with ambiguity.

Skills & Experiences:-

• Working within a technology driven organization
• Expose to a wide range of technologies, including Windows, Linux, Containers and Cloud
• Developing and delivering technical security controls into an organization
• Working with projects and product teams to identify gaps in security controls and defining ways to close them.
• Threat modelling, use case development and tools delivery
• Networking
• Technical security controls
• Security frameworks eg NIST CSF

Apply now for full details