Security Consultant

Join us as a Security Consultant at Barclays, advising our business on security strategy, best practices in Information and Cyber Security. Advising our business teams on processes and technology to operate a global enterprise securely within an increasingly dependent digital world. Regardless of what technical skills you can bring whether that be database expertise, software development, networking or pentesting you will be working amongst a highly talented team of like-minded professionals who have a wealth of experience and varied technical skills - what do you think you can bring to the team?

To be successful as a Security Consultant, you should:

- Be technically aware with a working understanding of computer networks, operating systems, databases, websites, and architectural principles.
- Have strong written and verbal reasoning skills - comfortable with technical writing and review.
- Be able to work as part of a team.

Some other highly valued skills may include:

- Current security certification CISSP is preferred.
- Experience of PCI-DSS.
- Experience in software development or business analysis disciplines including awareness of OWASP.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills.

This role will be based out of Knutsford.

**Purpose of the role**

To enable ‘secure by design’, supporting the bank’s change programmes, design and implement a secure systems and architecture across a broad set of security domains. These include data security, security risk management, asset security, security architecture and engineering (incl. cloud security), communications and networks, security operations, software development, security assurance testing, identity and access management (IAM).

**Accountabilities**
- Control function or security guild responsible for technology change oversight and governance.
- Enablement of DevSecOps (and shift left), by providing engagement channels for customers and stakeholders who wish to engage early seeking security advice and input into their business plans and opportunities, or technology change designs, influencing key stakeholders in COO and CSO to create security strategies to enable business and technology evolution.
- Support and guidance to CISO, CIO and Product Team functions providing security reviews for prospective 3rd party technology products and services.
- Transfer of residual risks to the business/customer as required by the bank’s enterprise risk management framework.
- Collaboration with stakeholder and IT teams to support incident response and investigations using their knowledge of the banks technology systems sharing security insights.
- Participation in the development and maintenance of security policies, standards and procedures aligned to the banks risk tolerance, regulatory requirements and industry best practice.

**Assistant Vice President Expectations**
- To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
- Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
- If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others.
- OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
- Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
- Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
- Take ownership for managing risk and strengthening controls in relation to the work done.
- Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
- Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
- E