Senior Scrum Master (Cyber)

Job Summary

The D&T Scrum Manter (Cyber Security / DTIS) is responsible for the end-to-end delivery of cyber security, information security, risk reduction and compliance initiatives within Haleons Digital & Technology Information Security (DTIS) organisation.

The Scrum Manter is responsible for driving governance, planning, reporting and operational oversight across Cyber Security and Information Security initiatives within the Run and Maintain portfolio. This includes initiatives such as Identity & Access Management (IAM), Privileged Access Management (PAM), Security Operations, Vulnerability Management, Data Protection, Security Compliance, Cloud Security and Cyber Risk Remediation programs. The role ensures delivery predictability, stakeholder transparency, portfolio control and continuous improvement across DTIS initiatives.

The role ensures projects are delivered with discipline, transparency and predictability, operating within established delivery frameworks, cyber security governance standards, risk management processes and portfolio controls. Working closely with business stakeholders, DTIS teams, delivery partners and suppliers, the Scrum Manter maintains clear ownership of scope, plans, risks and security outcomes.

Role Purpose

To deliver Cyber Security and DTIS projects safely and predictably, ensuring agreed business and security outcomes are achieved by applying standard delivery frameworks, proactively managing cyber risks and dependencies, and maintaining effective communication with stakeholders and leadership.

Key Accountabilities

• Successful end-to-end delivery of assigned Cyber Security and DTIS projects.
• Consistent application of DTIS governance, risk management and delivery frameworks.
• Effective management of scope, plans, cyber risks, issues and dependencies.
• Clear and timely reporting of project status, cyber risk posture and key decisions.
• Strong stakeholder, vendor and security partner management.
• Maintaining focus on agreed business, compliance and security outcomes.
• Supporting the reduction of cyber risk through effective delivery of security remediation initiatives.

Key Responsibilities

1. Project Delivery & Execution

• Own the delivery of assigned Cyber Security and DTIS projects from initiation through closure.
• Deliver security initiatives including Identity & Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Data Protection, Security Operations, Cloud Security and Infrastructure Security.
• Ensure projects deliver agreed scope, timelines, quality standards, security controls and business outcomes.
• Apply standard D&T delivery approaches (Waterfall, Agile or Hybrid as appropriate).

2. Planning & Control

• Develop and maintain robust project plans, including milestones, dependencies and critical paths.
• Coordinate delivery activities across security, infrastructure, application and business teams.
• Track remediation commitments and ensure timely closure of security actions.
• Manage project changes in a controlled and transparent manner.

3. Risk, Issue & Dependency Management

• Proactively identify, manage and escalate cyber security risks, issues and dependencies.
• Coordinate remediation of findings resulting from security assessments, audits, penetration testing and compliance reviews.
• Ensure mitigation actions are clearly defined, owned and tracked to closure.
• Maintain an accurate view of project health, cyber risk exposure and delivery confidence at all times.

4. Stakeholder Management & Communication

• Act as the primary point of contact for stakeholders across business, DTIS, Risk, Privacy, Infrastructure, Application teams and suppliers.
• Provide clear, honest and timely communication regarding project status, cyber risks, remediation progress, decisions and impacts.
• Facilitate governance, steering committee and cyber risk review meetings.
• Manage expectations and maintain alignment throughout the project lifecycle.

5. Financial & Resource Management (Project Level)

• Manage project budgets, forecasts and financial controls within delegated authority.
• Work with Finance partners to provide accurate financial reporting and visibility of variances.
• Ensure project resources, security SMEs and technical teams are planned and utilised effectively.

6. Supplier & Third-Party Management

• Manage delivery contributions from third-party security vendors, managed security service providers (MSSPs) and implementation partners.
• Ensure suppliers deliver to agreed timelines, quality, security and contractual requirements.
• Escalate supplier performance issues through appropriate governance channels.

7. Governance & Reporting

• Operate within established cyber security governance frameworks, ensuring all required artefacts and controls are maintained.
• Provide accurate, decision-oriented reporting into DTIS leadership, portfolio, assurance and risk forums.
• Support internal audits, external audits, compliance assessments and stage-gate reviews.
• Track and report cyber risk reduction and remediation metrics.

8. Outcomes, Adoption & Handover

• Maintain focus on agreed business, security and compliance outcomes throughout delivery.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.