About the role
Responsibilities:
- Lead the design, implementation, and optimisation of information security controls, processes, and tooling across cloud, endpoint, and application environments, aligning with enterprise security policies and risk appetite.
- Perform advanced threat, vulnerability, and control gap analysis; translate complex technical findings into prioritised remediation plans and actionable guidance for engineering, product, and operations teams.
- Serve as a subject matter expert and primary security liaison for assigned platforms or business areas, advising on architecture, data protection, identity and access management, and secure configuration standards.
- Drive security-by-design in new and evolving solutions by reviewing architectures and change proposals, defining security requirements, and collaborating with cross-functional teams to balance risk, usability, and business outcomes.
- Develop and refine detection, monitoring, and incident response playbooks; partner with operations teams to investigate complex security events and recommend containment, eradication, and recovery actions.
- Produce clear security documentation, runbooks, and guidelines; deliver targeted training or coaching to raise security awareness and improve secure practices across technical and non-technical audiences.
- Use data, metrics, and dashboards to evaluate the effectiveness of security controls, identify patterns and emerging risks, and recommend continuous improvements to processes and tooling.
- Mentor less-experienced team members and contribute to team-wide standards, frameworks, and best practices that improve consistency, reliability, and scalability of security operations.
Requirements:
- Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field.
- 8+ years of progressive experience in information security, cybersecurity operations, security engineering, or a closely related technical security discipline.
- Demonstrated experience designing, implementing, or operating security controls and processes in cloud-based or distributed technology environments.
- Experience collaborating with engineering, product, or operations teams to assess security risk, define remediation approaches, and implement secure-by-design solutions.
- Or an equivalent combination of education and experience.