Senior Security Consultant

This job has now expired please search on the home page to find live IT Jobs.

Senior Security Consultant

My client are looking for a Senior Security Consultant to join their team in Staines, London.

This role is part of a team that deliver SMART Security, Cyber Threat Intelligence, Vulnerability Management, Incident Response, Security Administration, Assurance and Investigations capabilities across the group.

The Role

* Acts as a Subject Matter Expert (SME) delivering standard security services within the project lifecycle across Centrica programmes and change portfolio

* Identify, agree and implement functional and technical solution requirements into projects and changes in-line with Centrica Security Standards Policies

* Provide standard and bespoke security design advice to projects across infrastructure, operating systems and applications

* Review and amend (as appropriate) project document sets such as Solution Designs, Low Level Designs and Project Plans

* Work with Security Operations to ensure transition of projects into Business as Usual (BAU) is accounted for, such as security processes, procedures and supporting service-level agreements (SLAs)

* Identify, assess and manage information security risks within the clients programmes and change portfolio

* Influence stakeholders to address identified Information Security risks

* Accurately estimate and forecast time required for project engagement to support resource planning and demand fulfilment

* Interfacing within the Information Security team to deliver project assurance activity in areas such as PCI, application security, data security, etc

The Person

* Experience of articulating technical topics in non-technical language presenting the business value of security

* Experience of securing and providing assurance for SAP systems and components

* Knowledge of core infrastructure components e.g. DNS, Active Directory, Exchange, Proxy management, Public Key Infrastructure, Firewalls, Load Balancers, Database, API gateways

* Experience of working on a large range of project sizes, from a programmes of work, though to small and complex projects

* Familiarity with industry best practise frameworks and standards such as ISO 27001, NIST and PCI DSS

* Knowledge of security products such as Endpoint Protection, Security Incident Event Management, Intrusion Detection/Prevention, Content Inspection, Data Loss Prevention, Encryption

* Experience of securing public cloud hosting environments is highly desirable

* CISSP, CISM or comparable security qualifications are highly desirable