Senior Manager Risk And Security Control

We’ve always been an organisation with purpose; we connect for good. You can trace this back to our beginning as pioneers of the world’s first telecommunications company. At our heart we’re a technology company with research and innovation in our bones that is known for doing things first and a desire to be personal, simple, and brilliant for our customers – those are the values we live by whilst also creating an inclusive working environment where people from all backgrounds can succeed.

In our team we bring network and IT infrastructure together with our software to create a truly dynamic infrastructure for BT and our customers big and small: consumers, SMEs or big multi -nationals, government services. Our IT and network infrastructure are the bedrock behind every BT experience. We help people Be There for what matters most; whether that’s their family, their customers, their colleagues, or their entertainment. Our solutions mean broadband, TV, the NHS, banks, banking, flights just work. The technology areas we major on are:

• We are big on really, really large-scale IP Networks and IT infrastructure: everything about them from bringing new tech on line to 24×7 operations, design, test, build, field services – UK and Globally
• Software engineering for infrastructure: exploiting a range of software languages and cloud environments such as AWS and Google, truly embracing the hybrid skills of the future. Although a good degree of automation exists there is much more that can be achieved
• Cloud and Data centres: we build them, run them
• Cybersecurity: more on that when you get here but we run some leading edge tools for this

This role is pivotal in ensuring we keep our customers and our dynamic infrastructure safe through a world class risk and security control environment. This role is about making sure we know where we stand and are actively pre-empting or improving any exposure.

• On going risk management
• Acting on vulnerabilities
• Providing the analytics and insights to make the right decisions
• Delivering successful audits and certifications
• Making sure we have the right visibility and the controls are operating effectively.
• You will lead a small team to get all this done and you will also need to continuously improve this area of work and the culture of security and control for the unit (~4000 people).

• Shaping, implementing and running risk management frameworks in a digital way at scale
• Delivering audits and certifications at a large scale
• Reporting and driving improvements to security and service interruption controls in a network and/or IT environment
• Insights and tracking solutions for security controls, including for example: vulnerability management, secure build compliance, access controls, asset lifecycle management
• Approving and down-streaming updates to BT Security Standards
• Collaborating with Cyber and Information Security to agree priorities and drive improvements in DI security posture
• Improving the Security culture and engagement across DI
• Delivering in this area of work with large matrix teams
• Judging the criticality of issues in a complex and somewhat unpredictable area
• Shaping the strategy for this type of work area and establishing the ways of working in an agile manner
• If you don’t have all the relevant experience or skills straight way you have experience in adjacent skills and an ability to take on major initiatives to establish a trusted and controlled environment
• You are a continuous learner
• Be a great people and change leader
• You might also have a CISSP certification or equivalent or working towards getting one

• Competitive salary
• 25 days annual leave (plus bank holidays)
• 15 % on target bonus
• Company car or cash in lieu
• Option to join the Healthcare Cash Plan
• Pension scheme with BT contribution
• Flexible benefits: cycle to work, childcare vouchers, healthcare, etc.
• Smart working
• Training paths
• Discounted BT products

#LI-Onsite, #LI-Hybrid, #LI-Remote