Advanced Specialist, Security Engineer

Job Title:

Advanced Specialist, Security Engineer

About the Role:

The BU Security Engineering Lead is a security-skilled technology professional who reports to the BU/function's Designated Risk Owner (DRO), with a dotted-line alignment to central Security to maintain consistency with enterprise security strategy,standards and priorities. The role is accountable for improving the BU/function'ssecurity outcomes and achieving agreed security objectives and metrics, working closely with GRC, Security Architecture and other central Security capabilities.

The role combines security expertise, technical leadership, engineering thinking, data-driven problem solving and strong business understanding. The Security Engineering Lead is part of the BU technology organisation, identifying security weaknesses,understanding their root causes and delivering practical solutions that measurably reduce security risk.

The role is accountable for improving the BU/function's security outcomes and achieving agreed security objectives and metrics.

What You’ll DoOwn improvement in BU security outcomes
• Take accountability for achieving agreed security objectives, targets and metricsfor the BU/function.
• Establish a clear understanding of the BU's current security performance, key exposures and areas of greatest risk.
• Use security data, trends and analysis to identify priorities and opportunities for improvement.
• Develop and execute plans to improve security performance and reduce measurable risk.

DCL2 - Internal Use Only
• Track progress against agreed objectives and intervene where performance isnot improving.
• Identify systemic issues and drive sustainable improvements rather than repeatedly addressing individual findings.

Drive remediation of security risk

Work directly with technology teams to improve performance against key security outcomes, including areas such as:
• Vulnerability and patch management
• End-of-life/end-of-support technology
• Privileged access management and reviews
• Security control implementation
• Security configuration and hardening
• Security remediation backlogs
• Recurring security findings
• Other BU-specific security priorities

The role is expected to understand why a metric is poor and determine what needs tochange to improve it.

This may include process changes, technology changes, automation, data improvements, changes to ownership or escalation to senior leadership.

Apply engineering thinking to security problems
• Use engineering principles to solve security problems at scale.
• Identify opportunities to automate repetitive security activities and controls.
• Use available security and technology data to identify patterns, root causes and opportunities for intervention.
• Work with engineering and technology teams to design practical solutions.
• Challenge approaches that rely primarily on manual activity, repeated chasing or temporary remediation.
• Help establish measurable, sustainable controls rather than one-off compliance exercises.

Embed security into technology delivery
• Act as the BU's security subject matter expert within technology teams.
• Participate in relevant technology planning, architecture and delivery activity.
• Identify security requirements early in the technology lifecycle.

DCL2 - Internal Use Only
• Help teams interpret and apply Security policies, standards and control requirements.
• Identify when specialist Security Architecture or other central expertise is required and bring it into the work at the appropriate point.
• Promote secure-by-design engineering practices.

Use data to drive decisions
• Establish reliable views of BU security performance.
• Analyse security data to identify trends, root causes and priority areas.
• Challenge inaccurate, incomplete or misleading security data.
•…