Security Engagement Partner

Overview

The Security Education & Training team helps all Tesco colleagues with a strong focus on Technology to develop the skills, behaviours and confidence to work securely. We design and deliver engaging learning, drive culture change, support technical enablement, and empower colleagues to champion security in their daily work.

Security Engagement Partners play a key role in shaping and delivering this mission through multi-disciplinary work across campaigns, technical uplift, security communities and colleague engagement.

Our Security Engagement Partners support Technology colleagues in mastering the art of becoming a best-in-class Technology professional who takes pride in working securely to protect their solutions, our business, and our customers. Through the development of customised, relevant and engaging training materials and initiatives, our team empowers Technology colleagues to own and care about their own security, understanding the simplest and most effective ways to work securely in their role.

We’re combining expert pools of thought to conquer the challenge of weaving security values into our existing Technology culture by utilising our expertise in content design, instructional learning and behavioural sciences and combining this with the knowledge of our security teams who see the value in empowering our colleagues to know about, care about and act securely about building secure solutions, and also want to shape how we build this knowledge and capability.

This role is about developing a community of Technology colleagues who are developing their security knowledge and experience, so they can empower their teams to become first-rate Technology professionals. As our technology teams design solutions, different security obstacles arise, and this role is to help colleagues comprehend those problems; identify gaps in knowledge or resources; and work closely with stakeholders and suppliers to deliver e-learning, videos, webinars, workshops, blogs and a variety of other resources to help Technology teams navigate these changes securely.

This role would be suitable for an expert Security Awareness and Training professional with hands-on experience in training teams on security topics and being responsible for a champion programme.

• Design and deliver clear, engaging security learning across all business areas (e-learning, webinars, workshops, events, micro-learning).
• Work with learning designers to build simple, relevant, role-specific content.
• Develop role-based security skills frameworks outlining required security knowledge, behaviours and capability across job families.
• Create micro champion communities to discuss successes and problems.
• Work one-to-one with champions to aid technical improvements or changes to ways of working within their teams and coordinate culture sprints to adopt changes in behaviour.
• Assist our training team in designing, facilitating and engaging our Cyber Security technical training events (such as capture the flag, hack-the-box activities) across our Technology colleagues globally.
• Relay new changes to champions to distribute to their teams and work with the relevant teams to communicate these changes.
• Where champion behaviours can be tracked and measured, showcase development and contributions.
• Report on the impact champion initiatives have on risk reduction.
• Compare trends and evaluate data across job families and teams to identify the most receptive and engaging champions.
• Recognise champion contributions to risk reduction and remediation activities.
• Review older training modules to update regularly once advice becomes out of date.
• Keep up to date with the changing threat landscape, updating training accordingly (including the latest criminal tactics and techniques) and keep champions updated of these changes.
• Attend industry events and forums to share knowledge and standard processes on the most up-to-date techniques for implementing security changes.
• Acquire feedback from champions during product trials and proof of concepts.

This role will suit somebody who enjoys working as part of a team; confident in local and remote stakeholder…