Data & AI Security Operations Specialist

Why this job matters

The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in both our on-prem and Google Cloud Platform estates. As part of this ambition, it is key to deliver safely, protecting the data at every stage.

The data in GCP is a huge and valuable asset to BT and in response BT must develop, deploy and run key processes, measurements and capabilities to protect this data. This role is required to ensure the right defence mechanisms are in place and that these are effective within CDH/GCP and where necessary the wider BT estate.

What you’ll be doing

• Must understand how to protect data BTs data in a cloud environment (GCP experience is preferred)

• Must understand the role of data in relation to Business process and systems

• Must classify the data and apply the appropriate controls

• Is responsible for ensuring that data is protected appropriately whilst at rest and as part of its journey into and through GCP

• Provides 2nd Line SecOps – working with the GCP Core SecOps Team to mitigate any identified risks

• Runs the Security Guide, Trust, Verify Model to ensure empowerment of users whilst helping them to comply and checking to ensure they do. This will incorporate 1st Line Assurance - Accountable for ensuring the effectiveness of security controls as they apply in GCP

• Provides guidance taking the squads from DevOps to a DevSecOps Model

• Is responsible for the assessment of new code pipeline patterns to ensure there are no security risk such as the potential for sql injection

• Creates a change network that builds consensus and momentum for change with join purpose, learning, decision making and accountability across different teams.

• Provides clear communication and engagement plans with stakeholders

• Ensure that the data is appropriately secured in the GCP estate based on how it will be used, who will have access to it etc

• Scope of existing controls and if any new ones are needed and if so how this will be implemented.

Skills and Experience Required

Skills Required:

• You will have a DevSecOps mindset, with security being job number one

• Understanding Data and how to leverage its value in a safe way. Industries where this is key could be Banking or Telcos.

• Excellent knowledge of Regulation and Industry Standards and Legislations, e.g. GDPR and PECR and applying the right controls to comply. Also

• Expertise in applying the right security controls in an Analytics environment to ensure balance is maintained between securing the data and retaining the utility of the data. This will include techniques such as Encryption, Fine Grained Access Control, Tokenization and Retention

• Stakeholder Management: Managing expectations and the level of stakeholder engagement. Ability to manage to complex political relationships in a variety of business and technical situations. Influence and engage with stakeholders in decisions based on analysis of their needs, interests and impact. Use empathy and the right language to avoid misunderstanding.

• Security Experience: Experience is needed within several areas, such as Security Architecture, DevSecOPs and Vulnerability Scanning.

• Problem Solving: Uses judgement & experience to solve often highly complex and abstract problems across the domain, such as launching new products and services, solving customer experience problems. Includes defining and alignment to business strategy.

• Automation: Have an eye for automation opportunities to save man hours and costs.

Experience you would be expected to have

• Technical Solutions: Demonstrates a breadth of technical acumen and commercial insight to determine how to solve problems through the use of technology and innovation including in Google Cloud Platform

• Data Knowledge: How to get the best out of the data whilst ensuring its safety

• Security Expert: Expert knowledge of IT Security policies, objectives, controls and remediations and significant experience in a senior IT Security role.

• Customer Experience: Experience in understanding the fundamental customer experiences that drive NPS, customer satisfaction and churn.

• Cloud and Security Certified: Experience of working in Cloud Environments. Cloud Security Certifications(CISSP) is preferred to have.

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.