This position is a leading role in designing, developing, and accessing all aspects of security for market leading regional and global systems based primarily on Cloud technologies. As a security consultant for our Regional Technology Hub you will be an individual contributor capable of supporting multiple project teams operating in the latest technologies of Cloud-based, Agile developed systems, using automated deployment from CI/CD pipelines. In other words, it is not just an audit or oversight role, but one that requires detailed participation in the design, implementation, and certification of security controls across solutions. This requires knowledge of various IT system architecture and Cloud technology, as well as supporting technologies such as IAM, network security, Kubernetes, user account management, audit and logging, and other security concepts as outlined in ISO27001/2, OWASP and related regional security standards. Also, the successful candidate should have knowledge of 3rd party security assessments and applicability of SOC1 and SOC2 reports, and concepts of vendor risk management.
Finally you will help us to drive towards a DEVSECOPS concept to make security an integral part of our development efforts.