Description:
This will be working within the Security Change Team, providing Cloud Security Subject Matter Expertise to the Bank’s change portfolio. You willl be an InfoSec SME across multiple cloud technology areas such as M365, Azure (Identity, Security and Compliance), Defender, Azure DevOps, Azure IaaS, etc
Main Responsibilities
- Act as an InfoSec subject matter expert, primarily focussed on cloud security across the Bank’s core cloud technology platforms;
- Assess whether the current (and proposed) configuration of these core cloud technologies meet the Bank’s security requirements, regulatory requirements and good industry practice;
- Define, document and agree security improvements/enhanced configurations where these are necessary;
- Define, document and agree security improvements/enhanced configurations as part of changes to the existing core technologies and the implementation of new capabilities, systems and technologies;
- Represent Information Security with Business stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs.
- Act as a specialist owner of 1 or more of the team’s security processes, systems or frameworks, maintaining specialist knowledge and continually evolving the process, system or framework with reference to the bank’s global and local system & process owners, regulation & good practice;
- Provide specialist advice as part of structured risk & control assessments, for example external supplier due diligence;
- Respond to queries from our branches and other colleagues on information security to ensure effective risk management of information security;
- Deputise for elements of the reporting manager’s role, on an ad-hoc basis, to cover absences, periods of increased workload, etc.
Ideal Candidate
- Security subject matter expert in multiple cloud technology areas such as M365, Azure (Identity, Security and Compliance), Defender, Azure DevOps, Azure IaaS, etc.
- Solid, practical and demonstrable experience of information security (technical and non technical aspects), ideally with an understanding of privacy ;
- able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders;
- positive, collaborative and builds and maintains effective relationship with others
- pragmatic, and effectively balances risk and control requirements with commercial drivers;