Data & AI Security Operations Specialist

Why this job matters

The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in all environments in our estate, including on-prem and Google Cloud Platform (GCP). As part of this ambition it is key to deliver safely protecting the data at every stage. This job is vital because this role encompasses the promotion of strategy, Security by Design, security transformation, vulnerability management (VM) and Incident Management 
This role protects one of BTs most important asset its Data. It directs all security projects that feed into Data and AI Security Delivery Unit, actively monitors and manages security exposure across a wide variety of measures.  

What you’ll be doing

•    The Data and AI Security Specialist must:
•    Understand the role of data and AI in relation to Business process and systems
•    Implement a vulnerability management strategy across Data and AI applications and maintain a good security posture and hygiene across systems.
•    Lead and drive in dynamically reducing the vulnerabilities across the estate. 
•    Own Security Tool Roll Out across Data & AI
•    Through the Security Transformation create a change network that builds consensus and momentum for change with joint purpose, learning, decision making and accountability across different teams.
•    Stay up to date and on top of the latest cyber security threats in BT and the industry and be able to quickly react, plan and remediate the UAV’s (urgent attention vulnerabilities) when applicable.
•    Prioritise and book in key Data and AI applications and newly developed applications for penetration testing
•    The role matrixes into several areas and several core initiatives with the central security team in BT. 
•    Spotting of automation opportunities within the security space.

The skills you will need to succeed

•    Stakeholder Management: Managing expectations and the level of stakeholder engagement. Ability to manage to complex political relationships in a variety of business and technical situations. Influence and engage with stakeholders in decisions based on analysis of their needs, interests and impact. Use empathy and the right language to avoid misunderstanding. 
•    Security Experience: Experience is needed within several key areas; Security tools rollout, Vulnerability patching, pen testing when its needed and the process.
•    Customer Experience: Identify opportunities and solutions that deliver “wow” experiences for our Customers. Building and agreeing implementation plans that drive fundamental changes to customer experience in a major domain. 
•    Problem Solving: Uses judgement & experience to solve often highly complex and abstract problems across the domain, such as launching new products and services, solving customer experience problems. Includes defining and alignment to business strategy. 
•    Automation: Have an eye for automation opportunities to save man hours and costs.

Experience you would be expected to haveLong Description

Security Expert: Expert knowledge of IT Security policies, objectives, controls and remediations  and significant experience in a senior IT Security role.

Technical Solutions: Demonstrates a breadth of technical acumen and commercial insight to determine how to solve problems through the use of technology and innovation including in Google Cloud

Security Tooling: Working knowledge of security tooling such as Qualys

Cloud Certified: Experience of working in Cloud Environments. The preference is that a Cloud Security Certification will be held.

Security Certified: CISSP or equivalent is preferred

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.