Security Specialist, AVP

Join us as a Security Specialist

• We’re looking for someone to actively support a domain and our wider organisation as a subject matter expert in a security-related field
• Day-to-day, you’ll be making sure that the security implications of the backlog are understood in the right way to build security early into the design
• This is your chance to bring a competitive edge to your career profile by solving new problems and creating smarter solutions and enjoying professional development opportunities
• We're offering this role at associate vice president level

In this role, you’ll make sure that decisions are based on robust data, return on investment and value measures that demonstrate thoughtful and intelligent cost management. You’ll also encourage the identification of ideas and drive the delivery of initiatives that will reduce cost and simplify our Group.

Additionally, you’ll work at a domain level to understand and make sure that robust security is continuously considered and incorporated at every stage, programme increment and Feature team delivery throughout the development lifecycle and through to support.

You’ll also be responsible for:

• Using your SME knowledge to support the wider organisation in building and operating secure services that protect both our colleagues and customers
• Collaborating with Feature teams and participating in store refinement, sprint planning and retrospective sessions
• Establishing a culture of innovation and strategic thinking that provides our Group with knowledge of the latest developments in your area of specialism
• Making sure any developments in your area of specialism are assessed and the impact on our wider organisation is appropriately communicated
• Building relationships with colleagues across our group and third-parties to make sure decisions are commercially-focused and create long-term value for our organisation

To be successful in this role, you’ll have experience of, or a willingness to learn, risk management frameworks. You’ll also have atleast 8 years of experience in information security, with strong hands‑on expertise securing AWS cloud environments.Knowledge of one, or more, security subject areas would also be advantageous.

You’ll also need:

• Experience of designing and implementing cloud security controls across IAM, KMS, VPC/network security, encryption, logging, and monitoring
• Experience in conducting risk assessments, threat modelling, vulnerability management, and supporting incident response activities
• A good understanding of application and integration security, including API security, authentication/authorization, and securing integrations with platforms such as Pega Customer Decision Hub (CDH)
• Knowledge of security governance and compliance frameworks including GDPR, ISO 27001, NIST CSF, and secure‑by‑design principles
• Experience of collaborating with architects, engineers, and delivery teams to embed security into solution design and CI/CD pipelines
• Experience in creating security standards, conducting design reviews, and preparing assurance artefacts for stakeholders

Hours

Job Posting Closing Date: