About the role

TPRM Security Consultant to act as a trusted advisor to senior stakeholders responsible for ensuring the security of a broad range of technical integrations between [Employer hidden — sign up to reveal] and its suppliers, providing risk based assessments and supporting third party options to mitigate security risks related to complex TPRM engagements. Additionally, to ensure Secure-by-Design thinking is embedded into everything we do and that the risks are understood and managed. You will be responsible for establishing and maintaining an effective relationship with assigned portfolio(s) of change from the Third-Party scope at both engineering and management levels. This is a global role that requires cross organisational influence over all areas of the business and technology including traditional retail, online, international, delivery centres, partners etc to support our mission in the management and reduction of Cyber Risk.

What you'll do

• Own the InfoSec relationship with identified Third Party portfolio(s) of change to drive risk‑aware business decisions
• Become a trusted advisor to the technical and management teams in your assigned portfolio(s)
• Identify when your TPRM portfolio(s) require additional InfoSec support from areas such as Security Architecture, Security Design or Security Engineering and broker a successful engagement
• Lead technical security risk assessments and provide requirements and guidance into change activities, founded in CIS and secured by design principles.
• Oversee supplier onboarding risk assessments and ongoing monitoring programs

Who you are

• Detailed knowledge of 2 or more security domains and good understanding of others e.g Application Security, Network Security, Infrastructure Security, Cloud Security, End-User Compute Security, IoT and ICU Security.
• Demonstrable understanding and experience of risk assessment and compliance frameworks
• 6 years in technology with at least 2 years’ experience delivering advanced level security engineering or similar role
• Supporting qualifications in technology or security e.g Microsoft/Azure Architecture, OR CISSP, CISM, CRISK, CGEIT. CCAK, CCSK, CCSP.

What’s in it for you

• After completing your probationary period, you’ll receive 20% colleague discount across all [Employer hidden — sign up to reveal] products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our [Employer hidden — sign up to reveal] Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

How to Apply

Send us your application via the 'Apply now' button. Fill in our short application form and hit submit. Depending on the role, you may be invited to an online assessment or interview. If you need any reasonable adjustments, let us know.