Overview
Senior Information Technology Security Officer Jobs in England, United Kingdom at Eames Consulting
Title: Senior Information Technology Security Officer
Company: Eames Consulting
Location: England, United Kingdom
Job Title:Senior IT Officer (Hybrid Working)
Location:United Kingdom (Must have full right to work in the UK, sponsorship not provided)
Contract:£650 per day (Outside IR35)
Position Overview:
We are looking for an experienced Senior IT Officer with a strong DevSecOps background to join a fast-paced technical environment. The successful candidate will be responsible for leading risk assessments, threat assessments, and ensuring compliance with key security frameworks. You will also be responsible for preparing reports, identifying vulnerabilities, and implementing measures to enhance the security posture of the organization. This is a hybrid role, requiring a candidate based in the UK.
Key Responsibilities:
Lead and conduct risk and threat assessments to identify and mitigate security risks within the software application lifecycle.
Prepare and present detailed reports outlining findings, recommendations, and action plans for improving security and compliance.
Work closely with stakeholders to ensure security standards and compliance frameworks are adhered to across the organization.
Implement and support OWASP, DSOMM, and SAMM frameworks within the development and operational processes.
Provide expert advice and consultancy on DevSecOps best practices, ensuring security is embedded throughout the software development lifecycle.
Manage compliance assurance activities, including audits, assessments, and reviews to ensure organizational alignment with security standards.
Collaborate with internal teams to address vulnerabilities and implement remediation plans in a timely and efficient manner.
Develop and refine processes to enhance software application maturity and security.
Maintain up-to-date knowledge of security threats, industry best practices, and compliance requirements to provide proactive solutions.
Required Skills and Experience:
Extensive experience working in a DevSecOps role with a focus on security integration within the software development process.
In-depth knowledge and practical experience with OWASP, DSOMM, and SAMM frameworks.
Strong background in compliance assurance and consulting, with a focus on risk assessments, threat assessments, and security posture improvement.
Excellent stakeholder management skills with the ability to communicate technical information to both technical and non-technical audiences.
Experience in a technical, fast-paced environment where quick decision-making and adaptation are key.
Strong report writing skills, with experience in creating detailed, actionable security reports.
Demonstrable software application maturity and a solid understanding of security best practices in software development.
Must have a clean DBS check.
Additional Information:
This role is hybrid, with a requirement to be based in the UK.
The role is outside IR35, offering £650 per day.
If you meet the above criteria and are looking to contribute to a dynamic, fast-paced environment, we encourage you to apply!