Our client is currently undergoing a Network Simplification and as part of that are producing a Solution Architecture for their Enterprise Network. As a pre-requisite to ADB submission they are required to produce a Security Opinion Report (SOR) to accompany this Solution Architecture. Therefore they are recruiting for a Senior Application Security Consultant. The Application Security Consultant will also support the increasing demand for Information Security skills across Group Functions. With an ability to review existing applications and also engage on new services being offered, this role is critical to advising on how we embed security into our business operations. This role will also play a key role in realising our Security Improvement programme across a number of our business areas and will require effective communication with a wide range of colleagues both technical and non-technical.

• Information Security broadly, knowledge of Access Control security, transportation security, secure architecture principles, cryptography and operational controls (such as back-ups, resilient design, anti-virus) are essential
• Knowledge of Threat modelling, control frameworks and Risk assessment techniques (such as ISO2700x, COBIT, COSO, ITIL and NIST Cyber Security Framework) is desirable
• Knowledge of Cloud Security practices is desirable
EXPERIENCE
• Security Design in projects (setting requirements, reviewing architecture)
• Risk assessment and control selection
• Critical review of products/vendors from a security perspective
• Experience of communicating to senior stakeholders in straightforward terms
• Dealing with ad-hoc user queries, where the role holder may not be an SME, and providing guidance in line with Security principles and seeking support from colleagues