Secure In Operation and Assurance Professional

Why this job matters

This role matters because it plays a critical part in ensuring the security and compliance of our organization's systems and operations. The Secure in Operation and Assurance Professional helps to identify and mitigate risks, implement security policies and controls, and foster a culture of security awareness and compliance throughout the organization. By doing so, they help to protect our customers, our business, and our reputation from potential cyber threats and regulatory violations.

About The Role

The Secure in Operations and Assurance Professional will be responsible for supporting the Secure in Operations and Assurance Manager to ensure that business operations are secure and compliant with policies, standards, and regulatory frameworks. They will work in partnership with operational colleagues to build an embedded and integrated secure in operation capability, leveraging security tooling to provide automation and proactive risk management.

Key Responsibilities

• Work collaboratively with the Secure in Operations and Assurance Manager to ensure that our business operations in 1st line are secure and compliant with policies, standards, and regulatory frameworks.
• Assist in the implementation and integration of the ART framework for the Cyber Group Risk Category, ensuring our security policies, standards, and controls are embedded across all business operations and functions with proper second line oversight and reporting to enable proactive cyber risk management.
• Participate in the establishment, running, and maintenance of a Secure in Operations operating framework and function that ensures alignment with the broader risk and security governance structures to establish and maintain.
• Assist in the definition of the Cyber GRC taxonomy that supports Cyber risk management and Secure in Operations responsible for implementation and ensuring operation and governance are embedded across all business operations and functions.
• Work with the Secure in Operations and Assurance Manager to develop and maintain a service catalogue detailing the roles and responsibilities of the team
• Support the Secure in Operations and Assurance Manager in building a systemic, integrated, and sustainable capability to further drive maturity in compliance with regulatory, contractual, and security standards.
• Support the Secure in Operations and Assurance Manager in conducting assessments and providing regular reports on compliance metrics results, aligning with internal audit.
• Use data to inform decisions, ensuring metrics are clear, unambiguous, and data-driven, with a focus on compliance and assurance.

Experience You'd be Expected to Have

Mandatory experience:

• Experience in information security and risk management
• Knowledge of industry standards and regulatory requirements related to information security and data privacy
• Experience in conducting security assessments and audits
• Strong analytical and problem-solving skills
• Experience in collaborating and communicating effectively with different stakeholders, including first-line teams

Preferred experience:

• Familiarity with regulatory compliance frameworks and standards (e.g., ISO27001, NIST, TSA, PCI-DSS)
• Familiarity with security governance frameworks
• Certifications such as CISSP, CISM, or CISA
• Understanding of threats systems can face
• Understanding of the control environment and how controls can be applied to

Benefits

• Competitive salary
• 25 days annual leave (plus bank holidays)
• 10% on target bonus
• Life Assurance
• Pension scheme
• Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships etc.
• 50% off BT and EE mobile pay monthly or SIM only plans
• Exclusive colleague discounts on our latest and greatest BT broadband packages
• BT TV, including BT Sport and the NOW Entertainment membership, and 25% off NOW Sport, Cinema and Kids
• 30% discount for friends and family on EE mobile pay monthly and SIM only plans

About usBT is part of BT Group, along with EE, Openreach, and Plusnet.

Millions of people rely on us every day to help them live their lives, power their businesses, and keep their public services running. We connect friends to family, clients to colleagues, people to possibilities. We keep the wheels of business spinning, and the emergency services responding.

We value diversity and celebrate difference. As Philip Jansen, our CEO, says 'We embed diversity and inclusion into everything that we do. It's fundamental to our purpose: we connect for good.'

We all stick to the same values: Personal, Simple, and Brilliant. From day one, you'll get stuck in to tough challenges, pitch in with ideas, make things happen. But you won't be alone: we'll be there with help and support, learning and development.

This is your chance to make a real difference to the world: to be part of the digital transformation of countless lives and businesses. Grab it.