Logo of Huzzle

Home

Matches

Explore

Manage

Director of Security Design Engineering Assurance

image

Liberty Global

2mo ago

  • Job
    Full-time
    Expert Level
  • Software Engineering
  • London, +1
  • Quick Apply

AI generated summary

  • You need extensive experience in security design, engineering assurance, leadership skills, knowledge of risk management, and ability to implement security frameworks effectively.
  • You will oversee security design, ensure engineering compliance, assess risks, develop strategies, and collaborate with teams to enhance security protocols and system integrity.

Requirements

  • Knowledge & Experience:
  • Extensive experience in information security or security assurance or security engineering and design, or security architecture with at demonstrable experience in a leadership role.
  • Proven experience in security reviews across networks, applications, mobile, and cloud environments.
  • Strong background in implementing security controls in both agile/DevOps and waterfall frameworks. For Agile/DevOps methodology its important to have prior implementation and delivery of security scanning service using tools like SAST/DAST/SCA etc.
  • In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, OWASP).
  • Prior experience with penetration testing and vulnerability management.
  • Demonstrable security risk management knowledge and experience.
  • Experience as acting as a change agent, driving continuous improvement and excellence.
  • Ability to operate at multi leadership levels and with both technical and non-technical audiences.
  • Experience in operating as a service provider to multiple global enterprise organisations including highly regulated organisations.
  • A deep and fundamental knowledge of information security management that will ensure immediate respect among multiple internal and external partners.
  • Demonstrable experience of working in a team-oriented, collaborative environment, with a strong focus customer service. Solid team player and able to work with indirect and direct diverse teams.
  • Essential skills & abilities:
  • Highly self-motivated and directed with an ability to make sound and logical judgments.
  • Demonstrable leadership and personnel/project management skills.
  • Ability to prioritize and complete tasks in a high-pressure environment and make sound decisions in emergency situations.
  • Proven analytical and problem-solving abilities, able to conduct research into issues and products as required.
  • Outstanding oral and written communication skills and leadership qualities in order to ensure agreement across the organisation, especially on difficult/contentious issues.
  • Preferred Education/ Qualifications:
  • Degree in computer science, Information Security, or a related field or equivalent experience
  • Relevant certifications such as CISSP, CISM are highly desirable.

Responsibilities

  • Leadership and Management:
  • Lead and manage a team of experienced security design assurance professionals.
  • Provide coaching and direction to senior managers and team members throughout the lifecycle, including risk mitigation discussions and service portfolio improvements.
  • Build relationships and collaborate with senior leaders and professionals across the group and in operating companies to provide quality security services.
  • Collaborate with other security leadership teams on strategy, architectures, security operations, and the information security group to integrate and deliver quality services across the business.
  • Act as the service owner with end-to-end responsibility for provisioning, delivery, and ongoing improvements to services.
  • Security Design Assurance:
  • Oversee the end-to-end security project assurance lifecycle, covering security design reviews across the design, build, and test lifecycle for all aspects of product and technology solutions. This includes corporate networks, access/core networks, data centers, business applications, mobile platforms, multi-cloud environments (AWS/GCP/Azure), continuous integration and delivery (CI/CD), and data platforms.
  • Ensure all proposed solutions meet security standards, baselines, and architecture patterns, and follow relevant regulations.
  • Identify control gaps and facilitate discussions with product/business owners to implement interim compensatory measures and risk management processes.
  • Manage DevSecOps pipelines, including risk assessments, triaging, tool onboarding, developer feedback, and ongoing service management to ensure continuous delivery.
  • Oversee multi-cloud build-out/operations, control codifications, cloud posture management, and ongoing operations support to ensure proper implementation of cloud architectural baseline controls.
  • Coordinate regular and annual penetration testing projects as per the agreed scope with business and information security teams.
  • Support process improvements across the lifecycle, from engagement registration to risk assessments, control selection, and testing.
  • Participate in special projects related to M&A on a need-to-know basis.
  • Service Delivery and Improvements:
  • Deliver security project design assurance across various development methodologies.
  • Coordinate with project managers and technical teams to ensure timely and secure project delivery, providing feedback on review outcomes and themes.
  • Collaborate with the security engagement director and business product owners to understand business product roadmaps. Prepare a service improvement plan, including resource and capacity management, to effectively deliver security services.
  • Develop service reporting metrics, key performance indicators and SLAs, and produce ongoing reports on the performance of each service for the business.
  • Foster a culture of security awareness and continuous improvement in risk assessment, triaging, and delivery processes.
  • Collaboration and Communication:
  • Work closely with Corporate IT, entertainment and connectivity platforms, Core network teams and operations teams to represent the function and embed security into the design and architecture of new solutions.
  • Represent group security in various steercos and governance forums and demand planning activities.
  • Compliance and Standards:
  • Ensure compliance with industry standards and regulatory requirements.
  • Support development of security policies, procedures, and standards across group security.
  • Stay updated with the latest security threats, technologies, and regulatory changes.

FAQs

What is the primary purpose of the Director of Security Design Engineering Assurance role at Liberty Global?

The primary purpose of this role is to oversee and manage security design project assurance activities across all product and technology stacks, ensuring that all new products and service solutions are designed, implemented, and tested with robust security controls from their inception.

What are the key responsibilities associated with the security design assurance aspect of the role?

Key responsibilities include overseeing the end-to-end security project assurance lifecycle, ensuring proposed solutions meet security standards, identifying control gaps, managing DevSecOps pipelines, coordinating penetration testing projects, and supporting process improvements across the lifecycle.

What type of experience is required for this position?

Extensive experience in information security, security assurance, or security architecture is required, along with a proven background in security reviews across networks, applications, mobile, and cloud environments. Experience in leadership roles and as a change agent is also essential.

What educational qualifications are preferred for applicants?

A degree in computer science, Information Security, or a related field is preferred, along with relevant certifications such as CISSP or CISM.

What essential skills should candidates possess for this position?

Candidates should possess self-motivation, leadership and project management skills, the ability to prioritize tasks under pressure, strong analytical and problem-solving abilities, as well as outstanding oral and written communication skills.

Is previous experience with specific security frameworks or standards important for this role?

Yes, in-depth knowledge of security frameworks, standards, and best practices, such as ISO 27001, NIST, and OWASP, is crucial for this position.

What is expected regarding collaboration and communication in this role?

The Director is expected to work closely with various teams, including Corporate IT, entertainment and connectivity platforms, and network operations, to embed security into the design and architecture of new solutions and represent group security in governance forums and planning activities.

What types of benefits does Liberty Global offer for this position?

Benefits include a competitive salary, eligibility for a bonus plan, annual leave options, volunteering time off, access to professional development platforms, company pension contributions, personal medical and dental insurance, and discounts on broadband subscriptions.

How does Liberty Global prioritize diversity and inclusion within the workplace?

Liberty Global is committed to creating an inclusive environment for all employees and embraces diversity. They ensure that individuals with disabilities receive reasonable accommodations and strive to have a workforce that represents all aspects of society.

What role does the Director of Security Design Engineering Assurance play in compliance and standards?

This role ensures compliance with industry standards and regulatory requirements, supports the development of security policies and procedures, and stays updated on the latest security threats and regulatory changes.

Liberty Global

Telecommunications
Industry
10,001+
Employees
2005
Founded Year

Mission & Purpose

Liberty Global is a company operating in the telecommunications and media industry, with a focus on providing broadband, TV, and mobile services to customers in Europe and the Caribbean. Their ultimate goal is to connect people and communities, delivering high-quality digital entertainment, communication, and connectivity solutions. Liberty Global's purpose revolves around offering innovative and reliable telecommunications services that enable individuals and businesses to stay connected, access content, and harness the power of digital technology. Through their network infrastructure and services, they aim to enhance the digital lives of their customers, promote connectivity, and support the digital transformation of societies and economies.