Senior GRC / Security Governance Consultant
HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.
Our purpose is to bring together the best of technology and our people to supercharge progress for everyone, everywhere our clients, partners, their stakeholders, communities, and the planet. As a company, we are deeply focused on accelerating our ESG agenda. We are also creating technology-enabled sustainable solutions with and for our clients and partners. We embed ESG imperatives into every aspect of our business and ensure that the progress we supercharge is responsible, inclusive and beneficial to all our stakeholders in the long term. We have committed to achieving net zero by 2040.
To learn more about how we can supercharge progress for you, visit www.hcltech.com
Job Title- Security Consultant
Location- Edinburgh, Leeds, Halifax, Manchester or Bristol
Hybrid mode- 2 days week (Work from client location)
Job Description
WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week currently, or 40% of our time, at our office location.
About this opportunity
Our Security Consultancy and Design team are continuing their search for Cyber Security Consultants who have a broad knowledge of Cyber Security domains and controls working across a wide range of computing platforms. Join our Chief Security Office here at Client as we build the future.
Are you someone who wants to be in the heart of Cyber Security delivering change and working in an agile way? Interested in being a part of shaping our Security Strategy? We have the perfect opportunity for you.
We are actively welcoming enthusiastic Cyber Security Professionals from all industries and backgrounds to join our expanding team as we embark on an exciting journey where you will have the opportunity to ensure security by design is embedded across our change portfolio.
Cyber Security sits at the heart of our business providing the Group with a secure operating environment, safe from malicious attacks. It is a dynamic and constantly evolving world where your experience and efforts can deliver tangible results to the safety of a huge company and over 30m customers.
What you’ll need
- Ability to develop, design secure solutions and produce a Security Design documenting the controls.
- The ability to deconstruct a solution / network architecture.
- Ability to identify and mitigate against threats and vulnerabilities associated with proposed solutions and evaluate the soundness of solutions using industry standard practices (e.g., STRIDE, MITRE).
- Demonstrate the ability to interpret threats into Risks, using your knowledge and experience to assist the business in assessing likelihood and impact.
- Effectively communicate technical concepts to both technical and non-technical collaborators.
- Skills to produce and articulate Security Designs to all collaborators within the project and business.
- Comfortable weighing the risks and benefits of competing Security design options.
- Comfortable working on multiple challenging projects simultaneously.
Any experience of these would be really useful
- Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP.
- Certifications in Security Management such as CISSP / CISM / CCSP or equivalent.
- Certifications in technical Security domains such as CEH / OSCP or equivalent.
- Experience of Public and or Private cloud environments.
About working for us
- Our focus is to ensure we're inclusive every day, building an organisation that reflects modern society and celebrates diversity in all its forms. We want our people to feel that they belong and can be their best, regardless of background, identity, or culture. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a