Regional Security and Regulatory Compliance Manager

Why this job matters

We’ve always been an organisation with purpose; to use the power of communications to make a better world. You can trace this back to our beginning as pioneers of the world’s first telecommunications company. At our heart we’re a technology company with research and innovation in our bones and a desire to be personal, simple, and brilliant for our customers - those are the values we live by whilst also creating an inclusive working environment where people from all backgrounds can succeed.

In order to protect itself and its customers Protect BT team is responsible for  identify emerging threats to the business and our customers and responding to them , this includes addressing the risks arising out of any non-compliance to regulatory requirements.  

The person holding the role would need to work with the various internal and stakeholders stakeholders including from business operations, security , regulatory, IT, HR , legal teams and other regional peers, the key purpose of your role is to protect BT’s interest, assets and people  by developing a comprehensive understanding of organization’s security needs , Security standards and apply them towards the management of regional risks, compliance and for upliftment of Security posture.

What you’ll be doing

As a Security Risk and Regulatory Compliance manager

You’ll be:

• Excellent  understanding and experience around the risk management and auditing of security domains related to Endpoint Security, Cyber , Privacy , Data Protection , Network Security and ITGC controls

• Having experience of handling and investigating Cyber security incidents and report writing

• Having a good understanding of Security frameworks and controls in NIST, PCI-DSS and NIS2

• Experience or excellent understanding of UK HMG Security standards and compliance obligations

• Extensive experience in 3rd Party Security risk management and compliance

• Ability to review  and draft Security Policies and standards

•  A good understanding and experience of Application security, cryptographic controls, Server security and Vulnerability management.

• Conceptualising and maintaining security and operational security metrics of Security posture based on the outcome of regular audits and risk management activities

Able to travel to undertake travels to perform the onsite physical, environmental and cyber security assessments and incident investigation.

We’ll also need to see these on your CV

• Preferable B.Tech/B.E/BSc in Computer sciences , IT, E&TC 

• Must have at least two of these certificates : CISA, CISSP, CISM and CCNA

• Experience of Senior stakeholders management including internal and external

• Ability to learn quickly

• Experience 16-25  Years

Why choose us:

Security is one of the fastest growing parts of our business. Our team of experts support over 1,700 customers – including the government, armed forces, emergency services, banks and supermarkets - to keep them safe from cyber-attacks. And we work closely with global law enforcement agencies to take action and make the internet a safer place for everyone.

We value different perspectives, skills and experiences.  Diversity makes sense for us, our customers and our ambitions. We’re creating an inclusive working culture where people from all backgrounds can succeed. That’s why we welcome applications from all parts of the community.

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.