Application Security Consultant

ARM • TRAFFIC • London, City, United Kingdom • £585 / day • 1d ago

Senior Application Security Consultant
5 Months
585 per day (Inside IR35)
1-2 days per week on site in London

The Application Security Consultant will support the increasing demand for Information Security skills across Group Functions. With an ability to review existing applications and also engage on new services being offered, this role is critical to advising on how we embed security into our business operations.
This role will also play a key role in realising our Security Improvement programme across a number of our business areas and will require effective communication with a wide range of colleagues both technical and non-technical.

Principal accountabilities:
1. Security Design - Ensure projects consider security in the design by setting security needs and requirements to ensure alignment to L&G Security Policies and Standards, participating in Technology or Supplier selection as a security SME and applying threat and initial risk assessment approaches to select appropriate controls. Work with the Group wide Security Improvement Programme to ensure Group Functions services align with current Security requirements.
2. Security Assessment - Review the design of in-flight or existing services to conduct risk assessments, identify and articulate security gaps against L&G Security Policies and Standards. For gaps identify the related risks and potential options for management - articulate options to system or business owners.
3. Security Advice and Guidance - Be a source of expert Information Security advice, both to projects (i.e. consulting with architects or developers) and in an ad-hoc manner (responding to user queries) working closely with key stakeholders and business leaders to ensure security issues are understood and reviewing existing systems and services to prioritise security improvement activities.
4 Security Advocacy - Represent the Group Functions Security team to senior business stakeholders. Identify areas where the Security team, and wider IT team, can add additional benefit and support business ambitions
5 Security Representation - Represent the Group Functions IT team in interactions with the wider L&G Group and Security Improvement project, such as sitting on Steering Groups or Customer Engagement Workshops and ensure Group Functions interests are input and requests for input are passed to the correct teams
6. Security Maturity - Actively work to improve the Group Functions IT Security Maturity and Capability. Suggest enhancements to processes, update or establish procedures where required.
7. Treating Customers Fairly (TCF) - Ensure that all customers/stakeholders are treated fairly in line with Legal & General's principles on Customer Experience, Employee Engagement, Continuous Improvement and TCF policy.

Qualifications-
Appropriate security qualifications and memberships (e.g. CISSP, etc.) are desirable, but not essential or demonstrable equivalent experience.

Knowledge-
Information Security broadly, knowledge of Access Control security, transportation security, secure architecture principles, cryptography and operational controls (such as back-ups, resilient design, anti-virus) are essential
Knowledge of Threat modelling, control frameworks and Risk assessment techniques (such as ISO2700x, COBIT, COSO, ITIL and NIST Cyber Security Framework) is desirable
Knowledge of Cloud Security practices is desirable

Experience in the following areas would be beneficial-
Security Design in projects (setting requirements, reviewing architecture)
Risk assessment and control selection
Critical review of products / vendors from a security perspective
Experience of communicating to senior stakeholders in straightforward terms
Dealing with ad-hoc user queries, where the role holder may not be an SME, and providing guidance in line with Security principles and seeking support from colleagues

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

Related Jobs

Dynamics 365 Support Analyst (contract)

MS Talent Ltd • TRAFFIC • Remote (London, City, United Kingdom) • £300 - £325 / day • 6d ago

Fully Remote Outside IR35

Dynamics 365 Support Analyst (D365, SC Cleared, Customer Service, 1st Line, 2nd Line) - Remote, Live Environment, Immediate Start. Outside IR35 A Dynamics 365 Support Analyst (D365, SC Cleared, Customer Service, 1st Line...

6d ago

Apply

Senior AWS Data Engineer

Tenth Revolution Group • TRAFFIC • London, City, United Kingdom • £500 - £600 / day • 1w ago

Engineer Outside IR35

Job Description AWS Stack, data being landed in S3, Lambda triggers, Data Quality, data written back out to AWS S3(Parquet Formats), Snowflake for dimensional model. Design and build the data pipelines, work with someone...

1w ago

Apply

Data Scientist

ARM • TRAFFIC • London, City, United Kingdom • £540 - £585 / day • 1w ago

Data Outside IR35

Data Scientist 3 Months Remote with occasional visits to site (1-2 days per week in London) (Apply online only) per day (Inside IR35) My client, in the financial services are looking for a Data Scientist to join their fa...

1w ago

Apply

Contract Business Analyst - Lloyds of London Market - £600/pd

Tenth Revolution Group • TRAFFIC • London, City, United Kingdom • £550 - £600 / day • 1w ago

Business Analyst Outside IR35

Contract Business Analyst - Lloyds of London Market - 600/pd Outside IR35 Location: London (Hybrid - 2 days per week) Contract Length: 6-12 months Day Rate: 600/pd (Outside IR35) Start Date: ASAP Are you a seasoned Busin...

1w ago

Apply

Senior React Native Engineer

Opus Recruitment Solutions • TRAFFIC • London, City, United Kingdom • £400 - £500 / day • 1w ago

Engineer Outside IR35

Senior React Native Engineer / Outside IR35/ Hybrid Working (1 day a week in London) / 12 Month Contract I'm working exclusively with a client who are on the lookout for a Senior React Native Engineer to join their team...

1w ago

Apply

CrowdStrike Engineer

Ganymede Solutions • TRAFFIC • Remote (London, City, United Kingdom) • 1w ago

Fully Remote Outside IR35

CrowdStrike Firewall Engineer Outside IR35 Contract £500/day London/Remote An excellent contract opportunity has arisen for a skilled CrowdStrike Firewall Consultant to join a leading organisation on a major security imp...

1w ago

Apply

Windows Migration Engineer

Ganymede Solutions • TRAFFIC • London, City, United Kingdom • 1w ago

Engineer Outside IR35

Windows Migration Engineer Outside IR35 Contract £500/day London/Remote We are working with one of our key clients to secure an experienced Windows Migration Engineer to lead a major server migration project. This contra...

1w ago

Apply

Privileged Access Engineer

Ganymede Solutions • TRAFFIC • London, City, United Kingdom • £500 / day • 1w ago

Engineer Outside IR35

PAM / ALM Consultant / Privileged Access Engineer Outside IR35 Contract £500/day London / Remote We are supporting one of our key clients in appointing an experienced PAM / ALM Consultant / Privileged Access Engineer to...

1w ago

Apply

Active Directory Engineer

Ganymede Solutions • TRAFFIC • London, City, United Kingdom • 1w ago

Engineer Outside IR35

Active Directory & Distribution Lists Consultant / Active Directory Engineer Outside IR35 Contract £500/day London/Remote We are supporting one of our key clients in securing an experienced Active Directory & Dis...

1w ago

Apply

Server Operating System Upgrade Consultant

Ganymede Solutions • TRAFFIC • London, City, United Kingdom • 2w ago

Outside IR35

Windows Server OS Upgrade Consultant Outside IR35 Contract £500/day London/Remote We are working with one of our key clients to secure an experienced Windows Server OS Upgrade Consultant to lead a major server migration...

2w ago

Apply