Lead Cyber Security Consultant

Heat Recruitment ,
Leeds, West Yorkshire
Job Type: Full-time
Salary: £600 per day

Overview

Secure Design Lead & Information Assurance Services for Dataworks replatforming Duration: 6 months OUTSIDE IR35 DV clearance is required , due to the sensitive nature of some of the work Essential Skills: Membership of a relevant professional body (e.g. BCS, CIISec). At least 10 years of broad security experience, with a relevant general security qualification (e.g. CISSP, CRISC, CISM). Substantial experience in interpreting & implementing HMG security policy. Substantial experience developing security architecture, with a relevant senior security architecture qualification (e.g. CCP Senior Security Architect). Substantial experience in risk assessment and risk management, with a relevant risk management qualification (e.g. CCP SIRA). Demonstrate extensive experience in providing board-level representation of security within the last 2 years. Demonstrate extensive experience in the development and implementation of security strategy, policies and procedures within the last 2 years. Demonstrate extensive experience in provision of Security Education & Awareness Training (SEAT) within the last 2 years. Demonstrate extensive experience in security incident response within the last 2 years. Demonstrate extensive experience of managing security within agile teams within the last 2 years. Demonstrate extensive experience in managing the conduct of Security IT Health Checks (ITHC) and remedial activities, ideally having led an ITHC engagement within the last 2 years. Demonstrate a solid understanding of securely handling sensitive data, including data valuation and interpretation of GDPR, DPA and other relevant legal instruments within the last 2 years. Demonstrate experience of managing security in the context of open-source code repositories and products within the last 2 years. Demonstrate extensive knowledge of working with the AWS cloud platform within the last 2 years. Demonstrate extensive knowledge of AWS Identity and Access Management (IAM) within the last 2 years. Demonstrate extensive knowledge of AWS security and monitoring tools (e.g. AWS Security Hub, AWS Config, AWS CloudWatch) within the last 2 years. Demonstrate experience in the practical hands-on implementation and management of security tools within the last 2 years. Desirable skills: Senior membership of a relevant professional body (e.g. FBCS, FCIISec). Demonstrate experience of implementing systems of record within the last 2 years. Demonstrate knowledge of AWS networking concepts within the last 2 years. Demonstrate experience of using and securing AWS Key Management Service (KMS) within the last 2 years. Demonstrate experience of using and securing AWS Cloud Hardware Security Module (CloudHSM) within the last 2 years. Demonstrate experience of using and securing AWS Certificate Manager Private Certificate Authority (ACM PCA) within the last 2 years. Demonstrate experience of using and securing AWS Simple Storage Service (S3) within the last 2 years. Demonstrate experience of using and securing AWS Elastic Cloud Compute (EC2) within the last 2 years. Demonstrate experience of using open-source security tools (e.g. Snyk)within the last 2 years. Demonstrate experience of Continuous Integration and Continuous Deployment (CI/CD) within the last 2 years. Demonstrate experience of using Infrastructure as Code to provision and manage cloud infrastructure using terraform within the last 2 years. Demonstrate experience of using Git and GitHub, GitLab or Bitbucket within the last 2 years. Demonstrate practical experience of configuring physical network and security tools (firewalls, switches, load balancers, etc) within the last 2 years. Demonstrate experience of managing service migration from on-premise to cloud-hosted platforms within the last 2 years. Demonstrate experience working in Data Centres within the last 2 years.