Cyber Security Lead

We're a leading innovative tech consultancy, a team of creative problem solvers. Since 1993 we've been finding better, more sustainable ways to solve complex technology problems for some of the world's leading organisations and delivered solutions that millions of people use every day.

In the last 30 years we won several awards, including a prestigious Queen's Award for Enterprise in the Innovation category for our Enterprise Agile delivery approach.

Operating from 26 locations across the world, we bring together teams of creative experts with diverse backgrounds and experiences, who enjoy working and learning in our collaborative and open culture and are committed to world-class delivery.

We're committed to growing our team with people who share our values.

We're expanding our Cybersecurity offer and have exciting opportunities for all cybersecurity experts to join our team.

We're looking for a hands-on Cyber Advisory Lead practitioner to shape the next phase of BJSS' cyber security journey. You will be part of the Managed Services Cybersecurity team and will take an active leadership role in developing our cyber security offer. As a leader, you will be responsible for aiding the Talent Acquisition Team with recruitment as well as mentoring and building a team of experts as part of this role. You will take part in thought leadership activities as well as being a hands-on practitioner engaging with client advisory work.

You will work with the existing, established cyber team in winning new business, engaging in presales activities and advising our internal teams on best approaches to successful implementation of cyber services.

You will have a point of view on DevSecOps and what this means and be able to articulate this to clients as well as influencing our go-to-market position.

You're a security expert who sets direction for others, comfortable leading teams of other highly experienced technologists and keenly aware of changes to the landscape. You have the ability to maintain a holistic big-picture view of cyber objectives and interdependencies, are hands-on, and understand cyber security compliance practices and acknowledges the need to maintain a practical and pragmatic approach.

You will devise ways to do things better, drive forward change as well as learn and explore new technologies. You will be interested in sharing our knowledge with others, internal and external.

You'll work in a fast-moving, agile environment, within multi-disciplinary teams, delivering advanced technology solutions to a range of clients across the globe. You will enjoy mentoring and leading a team to deliver quality outcomes and successfully embed security by design with proportionate appropriate cyber controls aligned to risk.

You will be a person our customers trust and will work with our clients and Senior stakeholders (negotiation and influencing) across multinational organisations, including third-party suppliers and delivery partners to ensure all aspects of cyber security are embedded in transformation programs we undertake.

You'll get to work with some of the brightest and best in the industry on some of the most exciting digital programmes around. Not only will this experience allow you to develop your skills, but you'll also learn new techniques and refine your interests.

You will actively engage other disciplines to improve the understanding and effectiveness of how we work together to build better security solutions. BJSS emphasises collaboration across disciplines and champions a culture where everyone works together, owning and resolving challenges as a team.

Skills required for this role include:

• Ability to undertake threat and risk assessments across varied technology stacks, identifying suitable mitigating controls
• Demonstrate clear leadership and an ability to communicate, influence and persuade across the organisation at senior levels, leading by example and aligning stakeholder groups around a common vision and successfully manage expectations
• Prioritisation across multiple products, based on overall product team structure and delivery strategy
• Strong ability to work under pressure in a changing environment

Experience required for the role:

• Broad technical knowledge of cyber security controls demonstrated by attainment of appropriate qualifications e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent - or with aspirations to work towards these certifications
• Knowledge of the NIST framework, PCI DSS, GDPR and NIS as well as NCSC cyber guidance
• DevSecOps experience and experience of platform engineering
• Experience working in an agile delivery environment would be highly advantageous
• Specific cyber knowledge and demonstrable experience in at least one of the following areas: Cloud security, network security, digital security (multi-platform), infrastructure security, security by design, security architecture
• Experience working in a regulated environment with specific cyber requirements that require interpretation and application languages to provide application security support
• Understand the whole lifecycle including analysis, enterprise development, build & deployment and support
• Thorough understanding of AWS or Azure cloud and security products
• Thorough understanding of adversarial tactics, techniques and procedures
• Strong attention to detail with an analytical mindset and the ability to spot and investigate anomalous behaviour

To be qualified for this role you should hold a degree in a relevant field, like Cyber Security, Computer Science, IT or Software Engineering or the equivalent level of experience. Have an understanding of Microsoft, AWS or GCP technologies. If you're naturally inquisitive, a helper, enjoy assisting people with software or infrastructure issues and are able to explain technical details simply, we'd like to meet you.

Ultimately, you will be a person our customer's trust. They will rely on you to provide timely and accurate solutions to their technical problems.

• Flexible benefits allowance – you choose how to spend your allowance (additional pension contributions, healthcare, dental and more)
• Industry leading health and wellbeing plan - we partner with several wellbeing support functions to cater to each individual's need, including 24/7 GP services, mental health support, and other
• Life Assurance (4 x annual salary)
• 25 days annual leave plus bank holidays
• Discounts – we have preferred rates from dozens of retail, lifestyle, and utility brands
• An industry-leading referral scheme with no limits on the number of referrals
• Flexible holiday buy/sell option
• Electric vehicle scheme
• Training opportunities and incentives – we support professional certifications across engineering and non-engineering roles, including unlimited access to O'Reilly
• Giving back – the ability to get involved nationally and regionally with partnerships to get people from diverse backgrounds into tech
• You will become part of a squad with people from different areas within the business who will help you grow at BJSS
• We have a busy social calendar that you can choose to join– quarterly town halls/squad nights out/weekends away with families included/office get togethers
• GymFlex gym membership programme