Description
Role Summary:
There is now an opportunity to be involved with the secure deployment of cutting edge banking Cyber technologies.
The role is for a contractor to work within the Security Engineering and Design team, independently as well as within the larger function, across some of the most forward-looking projects in banking. The role involves working with Commercial Banking labs and projects to help deliver secure financial products and services. This will require obtaining a deep understanding of various technologies in order to produce or provide input into the necessary design or solution documents. This role will involve providing cyber security leadership within projects and labs, working with security teams and SMEs across the Group to ensure standards are met or surpassed as well as with product owners, vendors and developers.
Main Responsibilities and Key Deliverables:
- Provide the following capabilities as required by the project or determined by the work load alignment:
- Security Architecture and Solution Architecture
- Security Engineering and Design
- Security Consultancy
- Participate within each project as a primary resource ensuring commitment to attend all appropriate calls and meetings as agreed with the project manager.
- Accept ownership for technical related deliverables as defined by the project scope. Agree these deliverables with the aligned Senior Security Engineer for the portfolio to ensure strategic and risk reduction adherence. Work with the project manager and business analyst to ensure any critical success factors or business objectives are reasonable and can be met.
- Manage requirements from stakeholders within each project and collaborate with the Senior Security Engineer portfolio lead on challenges that need wider business discussion or escalation to the Lead Security Engineers.
- Analyse security risk within each design as appropriate to the scope and ensure that all interested stakeholders are informed or consulted where necessary.
- Design and implement security controls using a combination of Enterprise Architecture Patterns, Security Standards and bespoke deliverables.
- Work closely with vendors, platform teams and SME's where necessary in order to agree architectural decisions, design statements and exceptions. Where necessary support the project in obtaining waivers related to security design decisions taken.
- Take the lead on security architecture decisions and issues where the problem scenario is not covered by a pattern or standard. Seek guidance from domain architects or domain engineers where appropriate.
- Collaborating with alternative technical resources with the goal of supporting projects in the production of design documentation eg Technical Solution Designs (TSD's) or security documentation where necessary.
- Ensuring that the drivers of Cost, Pace and Quality are maintained during production of or contribution to design artefacts.
- Provide security architectural SME knowledge and design engineering effort that leads to the creation of high quality solutions that comply with all relevant ITEC policies and Security Standards.
- Provide security support for assigned projects at review committees, boards or forums in order to facilitate the project through governance.
- Provide support for projects as they move into the delivery stage at a level suitable to ensure that the solution is implemented as per the design. Ensure the solution is taken back through governance where the design has changed during the implementation cycle.
Skills:
- Previous extensive experience working within Financial Services/Banking
- Team player and ability to lead deliverables within a project
- Motivated self-starter
- Internal and external stakeholder management
- Ability to liaise with other security and IT teams
- Ability to interact with both technical and non-technical stakeholders across different business units
- Ability to manage multiple projects and initiatives to deadlines
- Ability to explain detailed technical concepts to non-technical colleagues
- Ability to work within traditional waterfall and Agile delivery methodologies