Cyber Risk, DevSecOps / Sr. Associate Director, Cybersecurity Specialist

Responsibilities

• Act as the embedded 1LoD cybersecurity lead for Enterprise Technology engineering (applications, developer platforms/tooling, and AI), supporting the CISO/Deputy CISO by ensuring security is designed-in from inception and risks are managed within appetite and regulatory obligations.
• Provide hands‑on consulting and SME support to programmes, projects, incidents and major IT outages; build strong partnerships across ET CISO, central cyber functions (Engineering/Ops) and technology stakeholders (Architecture, engineering leadership).
• Lead the divisional AppSec programme, embedding secure SDLC/DevSecOps including secure coding standards, security acceptance criteria, and threat modelling; provide security input into architecture reviews to assure designs meet security and regulatory requirements.
• Govern vulnerability triage and remediation prioritisation using risk‑informed approaches (e.g., CVSS/EPSS), ensure remediation...