Security Solutions Specialist

Why this job matters

The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in all environments in our estate, including on-prem and Google Cloud Platform (GCP). As part of this ambition it is key to deliver safely protecting the data at every stage. This job is vital because this role encompasses the promotion of strategy, Security by Design, security transformation, vulnerability management (VM) and Incident Management 
This job protects one of BTs most important asset its Data. It directs all security projects that feed into Data and AI Security Delivery Unit, actively monitors and manages security exposure across a wide variety of measures.  

What you’ll be doing

The Data and AI Security Specialist must:
•    Understand the role of data in relation to Business process and systems
•    Implement a vulnerability management strategy across Data and AI applications and maintain a good security posture and hygiene across systems.
•    Lead and drive in dynamically reducing the vulnerabilities across the estate. 
•    Own Security Tool Roll Out across Data & AI
•    Through the Security Transformation create a change network that builds consensus and momentum for change with joint purpose, learning, decision making and accountability across different teams.
•    Stay up to date and on top of the latest cyber security threats in BT and the industry and be able to quickly react, plan and remediate the UAV’s (urgent attention vulnerabilities) when applicable.
•    Prioritise and book in key Data and AI applications and newly developed applications for penetration testing
•    The role matrixes into several areas and several core initiatives with the central security team in BT. 
•    Spotting of automation opportunities within the security space.

Key decisions

• Ensures business case cover is available; decides on what basis to proceed.
• Makes authoritative recommendations that balance delivery, strategic direction and operational performance.
• Scope of existing controls and if any new ones are needed and if so how this will be implemented.
• Effectiveness of existing security controls being implemented and recommend actions.

Skills required for the job

•  Stakeholder Management: Managing expectations and the level of stakeholder engagement. Ability to manage to complex political relationships in a variety of business and technical situations. Influence and      engage with stakeholders in decisions based on analysis of their needs, interests and impact. Use empathy and the right language to avoid misunderstanding. 
•  Security Experience: Experience is needed within several key areas; Security tools rollout, Vulnerability patching, pen testing when its needed and the process.
•  Customer Experience: Identify opportunities and solutions that deliver “wow” experiences for our Customers. Building and agreeing implementation plans that drive fundamental changes to customer experience in a major domain. 
•  Problem Solving: Uses judgement & experience to solve often highly complex and abstract problems across the domain, such as launching new products and services, solving customer experience problems. Includes defining and alignment to business strategy. 
•  Automation: Have an eye for automation opportunities to save man hours and costs.

Experience you would be expected to have

Security Expert: Expert knowledge of IT Security policies, objectives, controls and remediations  and significant experience in a senior IT Security role.
Technical Solutions: Demonstrates a breadth of technical acumen and commercial insight to determine how to solve problems through the use of technology and innovation including in Google Cloud
Security Tooling: Working knowledge of security tooling such as Qualys
Cloud Certified: Experience of working in Cloud Environments. The preference is that a Cloud Security Certification will be held.
Security Certified: CISSP or equivalent is preferred

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.