Security Engagement Manager

How will you make an impact?

• Security Posture Assessment :
  Collaborate closely with UK Sovereign technical teams to understand and assess the current security posture of environments.
• Vulnerability Reporting :
  Maintain and present vulnerability remediation status in a structured POA&M format, tracking progress against agreed timelines.
• Security Alerts :
  Identify and report potential security alerts to customers in accordance with contractual and compliance requirements.
• Customer Reporting :
  Prepare and deliver monthly security status updates to customers, including progress on scheduled remediation items.
• Information Translation & Communication :
  Gather detailed technical information from engineering and security teams, then convert and filter it into clear, concise, and structured updates that are accessible to both technical experts and non-technical stakeholders.
• Action Tracking :
  Capture customer feedback and action items during meetings, ensuring timely follow-up and resolution by technical teams.
• Compliance Alignment :
  Ensure security posture and remediation activities align with frameworks such as Cyber Essentials Plus, PCI DSS, ISO 27001, SOC 2 Type II.
• Remediation Oversight :
  Monitor and track remediation activities, ensuring alignment with agreed timelines and compliance requirements.
• Stakeholder Communication :
  Serve as the trusted point of contact for customers on all matters related to security posture, vulnerabilities, and remediation.
• Stress Management :
  Operate effectively in high-pressure, demanding situations, maintaining professionalism and clarity.
• Growth & Leadership :
  As the role expands, provide mentorship and leadership to additional team members.

• Citizenship & Clearance : UK citizenship and ability to pass SCC clearance.
• Technical Expertise:
  Strong technical understanding of security principles, practices, architecture, and vulnerability management.
• Compliance Knowledge:
  Familiarity with Cyber Essentials Plus, PCI DSS, ISO 27001, SOC 2 Type II, and similar standards.
• Communication
  
  Skills:
  
  Exceptional verbal and written communication skills, with the ability to tailor complex technical concepts for both technical and non-technical audiences.
• Customer Relations:
  Proven experience in customer-facing roles, ideally within security or technology sectors.
• Problem-Solving:
  Ability to work collaboratively to resolve issues under tight deadlines.
• Organizational
  
  Skills:
  
  Strong ability to prioritize, manage multiple tasks, and meet deadlines.
• Managerial
  
  Experience:
  
  Previous leadership or management experience is advantageous.
• Integrity and discretion when handling sensitive information.
• Resilience and adaptability in dynamic environments.
• Proactive and self-motivated with a commitment to continuous improvement.

You will have an advantage if you also have:

• Professional certifications in cybersecurity (e.g., CISSP, CISM, ISO 27001 Lead Auditor).
• Experience working with UK Sovereign or government environments.
• Familiarity with POAM processes.

Requisition : 9477
Reporting into: Director, Cloud Information Security and Architecture
Role Type: Individual Contributor