Security Lead

Hours:35 hours per week, hybrid working can be considered - minimum of one day to be worked from Head OfficeSalary:£71,206 Per AnnumClosing Date:Thu, 28 Mar 2024We are recruiting for a Security Lead to come and join our scaling Security team.Are you:Passionate about working directly with our stakeholders in a fast-paced Cloud enabled environment, ensuring that business value and benefit is being delivered.An experienced security professional with a drive for protecting people, assets, and data?Do you want to combine these two things working for a successful financial services organisation with a reputation for excellence?  If so, we want to hear from you!Who Are We?Not just another building society. Not just another job.We're the fourth biggest building society in the UK and what makes us a bit different is that we're a mutual organisation. We don't have shareholders; we're owned by our members.Our colleagues say Skipton's a great place to work, and you could be one of them, bringing with you new ideas on how we can keep customers at the heart of what we do.Whatever your background, and whatever your goals, we'll help you take the next step towards a better future.<
/p>We are seeking talented Security Lead, with a proven track record of working with Azure to join our information security team and provide expert guidance on all aspects of security. In this role, you will work closely with teams across the organisation, to identify potential security risks and develop pragmatic strategies to mitigate them. You will be comfortable working within the agile methodology and have a good understanding of DevSecOps.  We are undertaking a substantial technology transformation programme, and you will play a key role in helping deliver this by focusing on the programmes’ Security Governance and Compliance to ensure we are do things in the right way.What’s In It For You?Skipton values work/life balance and we are proud to support hybrid and flexible working, where possible. We have a newly refurbished head office which offers a vibrant and collaborative working space.We have a range of other benefits available to you including;Annual discretionary bonus scheme25 days standard annual leave + bank holidays + rising 1 day per year of service to a maximum of 30 daysHoliday trading scheme allowing the ability to buy and sell additional annual leave daysMatching employer pension contribution (up to 10% per annum)Colleague mortgage (conditions apply)Salary sacrifice scheme for hybrid & electric carA commitment to training and developmentPrivate medical insurance for all our colleagues3 paid volunteering days per annumDiverse and inclusive colleague networks available for you to join including our Carers and Pride Alliance groupsWe care about your health and wellbeing – we provide a range of benefits that support this including cycle to work initiative and discounted gym membershipWhat Will You Be Doing?The range of work you will be leading on includes:Providing security consul
tancy across the societyWorking closely with agile workstreams, you will help embed and empower security best practise into processes and pipelines.You will help build out and mature our DevSecOps capability.Maturing our cloud deployments, environment and supporting controlsSubject matter support for projects and change initiatives.Helping deliver our cyber roadmapBuilding a network of security championsIdentifying and implementing process improvements across our security teamsAssessing emerging threats and risksEvaluating security tooling and solutionsProvide SME on detection, protection, and incident response of security threats.What Do We Need From You?People are at the heart of what we do, and this is a great opportunity to use your experience and expertise to make a difference. With a large cloud transformation project in flight, we are looking for someone with experience of securing cloud deployments, to help lead the provision of security oversight and application of appropriate and pragmatic controls. You will also be inquisitive with a good general appreciation of enterprise-wide security threats, controls, and principles. You’ll be comfortable and have experience of working with the agile methodology.You’ll enjoy seeing projects through to the end and can focus on detail and produce high quality deliverables and reports. This is a senior position so you must be highly self-directed, with keen attention to detail.The successful candidate will hold one of the following qualifications CISSP, CISA, CISM or equivalent security qualifications.