Security Specialist, AVP

sJoin us as a Security Specialist

• We're looking for someone to actively support a domain and our wider organisation as a subject matter expert in a security-related field
• Day-to-day, you'll be making sure that the security implications of the backlog are understood in the right way to build security early into the design
• This is your chance to bring a competitive edge to your career profile by solving new problems and creating smarter solutions and enjoying professional development opportunities
• We're offering this role at associate vice president level
  
  

What you'll do

In this role, you'll make sure that decisions are based on robust data, return on investment and value measures that demonstrate thoughtful and intelligent cost management. You'll also encourage the identification of ideas and drive the delivery of initiatives that will reduce cost and simplify our Group.

Additionally, you'll work at a domain level to understand and make sure that robust security is continuously considered and incorporated at every stage, programme increment and Feature team delivery throughout the development lifecycle and through to support.

You'll Also Be Responsible For

• Using your SME knowledge to support the wider organisation in building and operating secure services that protect both our colleagues and customers
• Collaborating with Feature teams and participating in store refinement, sprint planning and retrospective sessions
• Establishing a culture of innovation and strategic thinking that provides our Group with knowledge of the latest developments in your area of specialism
• Making sure any developments in your area of specialism are assessed and the impact on our wider organisation is appropriately communicated
• Building relationships with colleagues across our group and third-parties to make sure decisions are commercially-focused and create long-term value for our organisation
  
  

The skills you'll need

To be successful in this role, you'll have experience of, or a willingness to learn, risk management frameworks. You'll also have experience of setting risk appetites and a background in defining risk policy controls. Knowledge of one, or more, security subject areas would also be advantageous.

You'll Also Need

• A strong background in Identity and Access Management, with hands-on experience of Microsoft Entra ID, Active Directory, and ADFS
• Experience developing automation solutions using PowerShell and other scripting tools to improve operational efficiency
• A good understanding of CI/CD pipelines and DevOps practices using Azure DevOps, GitLab, or similar technologies
• The ability to support release management activities and operate within established change control processes
• Experience designing and implementing observability solutions, including monitoring, logging, alerting, and operational dashboards
• The ability to integrate identity platforms with both cloud-based and on-premises applications
• A strong understanding of authentication and federation protocols, including SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP
• Experience working within Agile and DevOps delivery models
• The ability to identify manual processes and transform them into scalable, automated solutions