We are looking for a consultant to work as part of our Security Consultancy team to support the delivery of business change as we move capabilities to the cloud in a scaled agile environment with a strong and evolving DevSecOps approach. Work to support fast paced change in an exciting and growing business as Admiral continues to develop its offerings placing the customer at the centre of everything we do.  

Please note - this is a 12 month fixed term contract. 

Main Duties

• Understand the Strategic Business Objectives, actively contribute to achieving them.
• Provide technical security consultancy to the change delivery functions – agile & waterfall.
• Assess and improve security posture in CI/CD pipelines.
• Support the Security Champions Programme and DevSecOps.
• Liaise with technical stakeholders within Agile Tribes, Projects, and Programmes.
• Assess changes for technical vulnerabilities, threat models, assess security risk exposure, and identify appropriate controls to bring the risk within tolerance.
• Engage effectively with specialists in Security Architecture, Security Operations, Security Culture, Security Delivery, and Security Risk and Governance teams to ensure completeness and consistency of the advice provided to delivery functions.
• Ensure advice provided is of a high standard and based on best practice, supported by Security Leadership and withing the cost and risk tolerance of the organisation.
• Work closely with specialists in Security Operations to build operational use cases for detect and respond capabilities by ensuring Logging and Monitoring, Incident Response, and Threat Intelligence are all considered and included in security requirements, are implemented, tested, and validated by the business change delivery owner.
• Work closely with all areas of Infosec to provide continuous improvement of the advice provided from knowledge gained from analysing and resolving information security incidents that can be used to reduce the likelihood and/or impact of future incidents.
• Apply the information security risk assessment process to identify risks within the scope of the information security management system and identify the risk owners.
• Act as a champion for information security initiatives and maintain high standards of integrity and professionalism.
• Delivering risk assessment reports, threat modelling, and risk treatment recommendations in a timely and repeatable manner.
• Contribute to, and maintain, an effective risk management mechanism to ensure that system owners have accurate and current a view of information risk exposure.
• Meeting the InfoSec strategic objectives.
• Continuously develop technical security skills and capabilities in line with the organisation’s strategic objectives.

Experience and Qualifications Required

Essential skills 

• Technical background, with knowledge of one or more of the following, Development, IT support, Data Science, networking or system administration.
• Understanding of Cloud migration and Application Security development lifecycle and DevSepOps principles, automation, and familiarity with security architecture modelling. 
• Knowledge and experience of securing Azure and/or Google Cloud Platforms.
• Knowledge and experience of using at least one risk methodology.
• Security Software as a Service implementations.
• Strong stakeholder management and communication skills and a proven track record of working with businesses to meet strategic objectives.

Desirable 

• Experience of threat modelling, risk/posture assessments, and control implementation.
• Educated to degree level related to information security risk management.
• Experience of agile and waterfall delivery environments. 
• Recognised security professional qualifications (e.g CISSP, CCSP, CISMP).
• Cloud specific qualifications (e.g – CSA CCSK, CCSP, AZ-900, GCP fundamentals).

Please note - we may close this vacancy early if we receive lots of applications or business priorities change.

Admiral: Where You Can

We take pride in being a diverse and inclusive business. It's a place where you can Be You, and show up as you are. We’re committed to fostering a people-first culture where everyone is accepted, supported, and empowered to be brilliant. You can, Grow And Progress at a pace and direction that suits you, Make A Difference for our customers and each other, and Share in Our Future with all colleagues eligible for up to £3,600 of free shares each year after one year of service.

Everyone receives 33 days holiday (including bank holidays) when they join us, increasing the longer you stay with us, up to a maximum of 38 days (including bank holidays). You also have the option to buy or sell up to an additional five days of annual leave.

We’re proud of our people-first culture. In fact, we've been recognised as a Great Place to Work for Women, a Great Place to Work for Wellbeing, and an overall Great Place to Work for over 25 years! We’re fully committed to making sure your progression is not slowed or halted by barriers related to race, gender, age, sexuality or any of the protected characteristics.

Our fantastic benefits make sure our colleagues have a great work-life balance; You can view some of our other key benefits here.

#LI-CS1