Security engineer in cybersecurity

The BU Security Engineering Lead is a security-skilled technology professional who reports to the BU/function's Designated Risk Owner (DRO), with a dotted-line alignment to central Security to maintain consistency with enterprise security strategy, standards and priorities. The role is accountable for improving the BU/function's security outcomes and achieving agreed security objectives and metrics, working closely with GRC, Security Architecture and other central Security capabilities.

• Take accountability for achieving agreed security objectives, targets and metrics for the BU/function.
• Establish a clear understanding of the BU's current security performance, key exposures and areas of greatest risk.
• Use security data, trends and analysis to identify priorities and opportunities for improvement.
• Develop and execute plans to improve security performance and reduce measurable risk.
• Track progress against agreed objectives and intervene where performance is not improving.
• Identify systemic issues and drive sustainable improvements rather than repeatedly addressing individual findings.
• Work directly with technology teams to improve performance against key security outcomes, including areas such as vulnerability and patch management, end-of-life/end-of-support technology, privileged access management and reviews, security control implementation, security configuration and hardening, security remediation backlogs, recurring security findings, other BU-specific security priorities.
• Use engineering principles to solve security problems at scale.
• Identify opportunities to automate repetitive security activities and controls.
• Use available security and technology data to identify patterns, root causes and opportunities for intervention.
• Work with engineering and technology teams to design practical solutions.
• Challenge approaches that rely primarily on manual activity, repeated chasing or temporary remediation.
• Help establish measurable, sustainable controls rather than one-off compliance exercises.
• Act as the BU's security subject matter expert within technology teams.
• Participate in relevant technology planning, architecture and delivery activity.
• Identify security requirements early in the technology lifecycle.
• Help teams interpret and apply Security policies, standards and control requirements.
• Identify when specialist Security Architecture or other central expertise is required and bring it into the work at the appropriate point.
• Promote secure-by-design engineering practices.
• Establish reliable views of BU security performance.
• Analyse security data to identify trends, root causes and priority areas.
• Challenge inaccurate, incomplete or misleading security data.
• Translate security data into actionable priorities for technology leadership.
• Measure whether interventions have actually improved the security outcome.
• Provide transparent reporting to the DRO and relevant governance forums.

• Significant experience in technology, engineering, cyber security or a closely related discipline.
• Strong understanding of practical cyber security controls and technology risk.
• Demonstrable experience working directly with technology and engineering teams.
• Ability to understand security standards and translate them into practical technical outcomes.
• Strong analytical and data-driven problem-solving skills.
• Experience improving measurable operational or technology outcomes.
• Ability to understand complex technical environments and identify root causes of security problems.
• Strong stakeholder management and influencing skills.
• Ability to challenge constructively and escalate when required.
• Comfortable working with ambiguity and determining practical solutions rather than simply identifying problems.
• Будет плюсом: Engineering, software development, infrastructure or architecture background; Experience with vulnerability/patch management, IAM/PAM, cloud security or security operations; Experience automating security processes or controls; Experience working within regulated or highly controlled environments; Relevant professional security qualifications or equivalent practical experience

• Условий в вакансии нет