Cyber Security and Operational Resiliency Risk Specialist

As part of BT Digital, we are recruiting for Cyber Security and Operational Resiliency Risk Specialists to interface with key stakeholders within Digital to ensure that key controls are implemented and operating effectively through appropriate 1st line roles and responsibilities. We also support with the management of risks in the most appropriate and effective manner.

What you’ll be doing

• Champion Digital Transformation by working with risk leads and other stakeholders within BT Digital CIO.
• Assess Cyber security and Operational Resiliency risks and recommend practical solutions to bring security risk within BT’s risk appetite.
• Provide updates to the monthly Security Forum or any other Forums on areas of concern within BT Digital.
• Identify gaps in key controls for the Cyber and Operational Resiliency Group Risk Categories and recommend remediation actions.
• Co-ordinate and support 1st line risk assurance programmes including oversight of any risks and issues arising and perform timely independent sample-based testing to ensure controls are operating effectively.
• Participate in working groups for key programs/projects in BT Digital to ensure Security requirements are built in from the start.
• Perform regular horizon scanning to monitor developments of existing and new industry standards/regulations, ensuring best practice is followed.
• Ensure effective quality assurance and the overall integrity for BT Digital. 
• Input into the quarterly reports for Audit and Risk Committees.

You'll have the following skills and experience

• Security knowledge: Excellent understanding of security policies, standards and controls. Industry certifications such as CISA or CISSP would be desirable. 
• Technical skills: Experience in cloud platforms (GCP, AWS, Azure) or generative AI would be an advantage. Ability to learn new technical skills as and when required.
• Problem solving skills: Intuitiveness and ability to find solutions to problems irrespective of the technology involved and to simplify concepts and processes.
• 3 lines of defence: Solid experience with security risk management across the three lines of defence model within a complex organisation. Big four or similar experience would be an advantage.
• Communication: Ability to liaise with multiple teams across the business on various topics (eg. operations, policies, strategy) to gather the relevant data to be presented in dashboards.
• Presentation: Ability to present information in a clear structure considering the target audience. Ability to create bespoke analysis / visualisations on-demand.
• Adaptability to the complex changing environment within Digital.