SME - IT security

Job Summary

Job Description - Cyber Security Specialist (Security Connector) Function: CSO Role: Cyber Security Specialist - Security Connector Hiring Managers: Louise Furniss / Julie Wilson Grade: E/F Location: UK Open Positions: 2 Duration: Enduring (15 Months+) ________________________________________ Job Summary • Join the Cyber Security team to provide security expertise across enterprise technologies, cloud platforms, and emerging AI solutions. • Support the assessment, design, and implementation of security controls across digital transformation initiatives. • Partner with engineering, architecture, and business teams to embed security throughout the software development lifecycle. • Evaluate security risks associated with modern architectures, APIs, microservices, cloud environments, and third-party integrations. • Contribute to threat modelling, security reviews, and risk assessments to ensure robust cyber resilience. • Help strengthen organizational security posture by applying industry standards, frameworks, and best practices. • Act as a trusted security advisor, enabling secure innovation while balancing business and regulatory requirements. ________________________________________ Key Responsibilities • Conduct security assessments and provide recommendations for cloud, application, infrastructure, and AI-based solutions. • Perform threat modelling activities using frameworks such as STRIDE, MITRE ATT&CK;, or equivalent methodologies. • Review APIs, containerized services, and microservice architectures to identify security risks and vulnerabilities. • Collaborate with development and operations teams to ensure secure-by-design principles are implemented. • Support incident investigations, vulnerability remediation activities, and security governance initiatives. • Evaluate compliance against industry standards including NIST, ISO 27001, PCI DSS, OWASP, and COBIT. • Provide technical security guidance and contribute to security policies, standards, and best practice documentation.

Key Responsibilities

Skill Requirement • Broad knowledge of enterprise technology environments, including cloud computing, AI, networking, and modern application architectures. • Strong understanding of cyber security domains including endpoint security, network security, cryptography, identity and access management (IAM), and application security. • Experience securing RESTful APIs, containerized applications, and microservices-based platforms. • Hands-on experience with threat modelling, risk assessment, vulnerability management, and security architecture reviews. • Understanding of public cloud and private cloud security controls, architectures, and governance practices. • Familiarity with security frameworks and standards such as ISO 27001, NIST, PCI DSS, COBIT, and OWASP. • Strong analytical, communication, stakeholder management, and problem-solving skills within complex enterprise environments. ________________________________________ Technical Certification Need to Have and Good to Have Need to Have • CISSP (Certified Information Systems Security Professional) or equivalent security management certification. • CISM (Certified Information Security Manager) or equivalent security governance certification. • CCSP (Certified Cloud Security Professional) or equivalent cloud security certification. • Demonstrated knowledge of enterprise cyber security controls, risk management, and security governance. • Experience working within public cloud and/or private cloud environments. Good to Have • CEH (Certified Ethical Hacker). • OSCP (Offensive Security Certified Professional). • AWS Certified Security - Specialty. • Microsoft Certified: Cybersecurity Architect Expert (SC-100) or equivalent. • Azure Security Engineer Associate (AZ-500). • GIAC certifications (GSEC, GCIH, GPEN, or equivalent). • Certifications related to threat intelligence, cloud security, DevSecOps, or Zero Trust security architectures.

Skill Requirements

Additional Context • Immediate demand is currently being fulfilled by specialist niche suppliers. • The long-term strategy is to build sustainable capability through Tech NPW partners for future cyber security requirements. • The role requires strong collaboration across security, engineering, architecture, and business teams to deliver secure enterprise solutions. • Candidates should demonstrate a proactive security mindset, continuous learning attitude, and the ability to adapt to evolving threat landscapes. • Exposure to AI security, cloud-native security, and modern digital platforms will be highly advantageous.

Other Requirements

Additional Context • Immediate demand is currently being fulfilled by specialist niche suppliers. • The long-term strategy is to build sustainable capability through Tech NPW partners for future cyber security requirements. • The role requires strong collaboration across security, engineering, architecture, and business teams to deliver secure enterprise solutions. • Candidates should demonstrate a proactive security mindset, continuous learning attitude, and the ability to adapt to evolving threat landscapes. • Exposure to AI security, cloud-native security, and modern digital platforms will be highly advantageous.