Ensure that architecture decisions support resilience, scalability, and compliance with emerging threats and regulatory requirements.
Lead the design and evaluation of security controls for new systems, platforms, cloud solutions and major transformation programmes.
Provide expert advisory to project teams, solution architects, and engineering teams on system hardening, network segmentation, identity security, cloud security and application security.
...
• Cybersecurity Compliance Supporto Support cybersecurity compliance activities to ensure adherence to internal policies, standards, regulatory requirements and organisational obligations. o Assist in monitoring and reporting cybersecurity compliance posture across business units and systems. o Conduct compliance gap assessments and support remediation planning activities.o Support internal and external audit engagements, regulatory inspections and compliance assessments.
• Third-Party Cyber Risk Management & Security Rating Monitoringo Manage and continuously enhance the Cybersecurity Third-Party Risk Management (TPRM) programme and associated assessment processes. o Perform cybersecurity due diligence assessments for vendors, suppliers and service providers. o Monitor vendor’s cybersecurity posture and security ratings to identify emerging risks and ensure timely remediation of identified issues. o Prepare assessment repots, risk findings and recommendations to support management decision-making, procurement evaluation and governance reviews.
• Cybersecurity Resilience & Table-Top Exerciseso Develop, coordinate and facilitate cybersecurity table-top exercises, cyber crisis simulations and incident response exercises. o Design realistic cyberattack scenarios to validate incident response, crisis management and decision-making processes. o Document exercise outcomes, lessons learnt and recommendations for improvement. o Support initiatives to strengthen organisational cyber resilience, operational readiness recovery capabilities.
...
Configure and maintain application deployment artefacts, environment configurations, and infrastructure definitions.
Collaborate with solution architects, platform teams, cybersecurity stakeholders, and software development teams to resolve deployment, security, compliance, and operationalissues.
Automate operational and deployment-related tasks through scripting and approved automation tools where appropriate.
...