Azure Security Lead (Inside IR35)

Principal accountabilities:

1.

Communicate security advice, standards, guidelines and training from the wider security organisation into product teams within their domain of responsibility, so that they are understandable and compatible with fast-moving, highly automated product development.

2.

Adapt a tailored information security framework so that can be easily incorporated into the DevSecOps lifecycle for product teams in their domain, so that the process of compliance is simplified for those teams.

3.

Act as a conduit for security knowledge, threat intelligence and enquiries between the information security team and product teams in their domain, so that those teams receive timely and consistent advice.

4.

Oversee compliance with wider organisational security requirements in their domain, so that a single integrated approach which is compatible with DevSecOps practices is used across all their product teams.

5.

Compile and present security related reports on the domain for the wider organisation, working with DevSecOps Engineers to automate as needed, so that the department is transparent about its security performance and timely in delivering that information.

6.

Provide, in conjunction with Security Architects, expert guidance on risk assessment and mitigation in their domain, so that product teams can make the right choices to protect my client's data.

7.

Promote a strong culture of security across teams in their domain, so that DevSecOps Engineers feel empowered and supported to maximise the security elements of their role.

8

Consumer Duty accountabilities: Engage stakeholders and undertake and appropriate testing prior to the implementation of any system or business changes to ensure the impact on internal stakeholders and customers is understood.