Security Enterprise Architect

The Cyber Security Consultancy Principal leads a range of information security, data protection, governance, risk and compliance activities including client assurance, policy compliance, vulnerability management, risk assessments and incident response.

1. Leads the development and implementation of the Cyber Security strategy, developing and maintaining a current road map including new features and subservices required to meet commercial demand as well as changes to the security landscape, the sector and technologies.
2. Leads the deployment, integration and configuration of the most complex security solutions and enhancements to existing security solutions in accordance with standard best operating procedures.
3. Leads the execution of threat modeling and security assessments, determining security requirements and specifications, and developing security solutions to satisfy design requirements.
4. Leads the provision of information and cyber security advice and guidance to key stakeholders across the BT Group including multiple senior stakeholders.
5. Leads the creation of policy for the Cyber Security function relating to the compliance, validation and assessment of major information technology systems, developing and providing security and governance reviews.
6. Leads the design and implementation of information and cyber security controls and change initiatives across the BT Group.
7. Leads the reporting of the status of risk exposure and control maturity against the relevant policies and standards.
8. Operates as an SME in cyber security, providing expertise and analysis in the development of the Business Continuity Management Programme and Disaster Recovery Plan.
9. Ensures product compliance with applicable security standards, group policies and industry best practices.
10. Mentors and coaches experienced professionals to develop current and future team capabilities and ensure performance.
11. Leads the implementation of continuous improvement opportunities to improve cyber security processes.