Security Business Partner Security Consultant

Wokingham, Berkshire
Pontoon

Security Business Partner (Security Consultant)UtilitiesPredominantly remote: 2-4 days per month in the officePermanent position£65,000 – £75,000 per year

In short: Security Business Partner / Security Consultant required to join a large energy provider in leading the consultancy function of the business. This is a management of resource role. History of risk management would be nice-to-have.

In full:

The Lead Cyber Security Consultant will work closely with both the Head of Business Enablement and Head of Delivery and will play a pivotal role in translating the goals and policies of the centralised security function. You’ll actualise our cyber strategy, help shape the future direction of our security function and provide vital business insight.

As Lead Cyber Security Consultant, you will work closely with business stakeholders to understand their business model and roadmap for technology, acting as an interface between the business and the cyber security organisation.

Management of relationships with the business is key to delivering our cybersecurity strategy. Whether it be implementing new solutions, driving operational effectiveness and efficiency, or providing guidance back to further enhance our strategy, the Lead Cyber Security Consultant provides the engagement and builds stakeholder relationships to enable the security organisation to deliver maximum value.

The role will ensure the secure design and secure implementation of technology solutions, platforms, and infrastructure to support:

• The business as it transforms its services to meet zero carbon operability
• Separation of the business into an independent organisation

Primary Responsibilities

• Understanding the programmes strategy, priorities, and timelines to be able to provide an effective security steer
• Day to day engagement with programme teams to advise and consult on security matters
• Handling escalations and working to resolve issues in a pragmatic, business focussed approach whilst managing risk
• Coordination of technical design/review activities with various segments within the security team
• Accountable for ensuring that key risks and issues are identified, addressed, and resolved in a manner that satisfies the business
• Accountable for ensuring residual risk is captured and owners are identified and accept the risks
• Implementing and continually monitoring ways of working with the programme to ensure effective cyber security delivery
• Managing project security resourcing, ensuring availability of resource in line with programme roadmap

Experience & Qualifications

• Multiple programmes of experience in cybersecurity
• Relevant cybersecurity qualification(s), for example Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)
• Experience with cybersecurity functions, including risk management, vulnerability assessments, security assessments, strategy and program development, network architecture designs, and/or monitoring solutions
• Experience with security systems, including firewalls, intrusion detection systems, anti-virus software, authentications systems, log management, and content filtering
• Experience with cybersecurity tools, network topologies, intrusion detection, PKI, and secured networks
• Experience with cybersecurity standards and best practices and how to integrate them

Desired Capabilities

• Strong communication (written and verbal), leadership, and partnering skills
• Able to demonstrate a high degree of credibility and influence senior stakeholders within the organisation
• Able to effectively translate complex technical requirements to business language
• Experience of designing and managing security controls within service providers and the cloud
• Proven track record of successfully delivering business requirements to time and budget constraints
• Familiar with contract management, ensuring security controls are referenced within the agreement
• Prepared to challenge the business and security colleagues and have the “difficult conversations” where needed in the interests of the business
• Able to operate as a highly independent worker and as part of a strong team/collaborative approach
• Able to create effective cybersecurity documentation, including security policies, plans, and procedures

Candidates will ideally show evidence of the above in their CV in order to be considered.Please be advised if you haven’t heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.