Cyber Security Consultancy Principal

Job Description

About the role

At BT International, our purpose is to keep the world tied. As part of BT, we build on almost 180 years of innovation and expertise to deliver secure connectivity and digital services to some of the world’s leading multinational businesses and organisations. Our customers rely us to safeguard their data, drive their digital transformation and keep their businesses running.
With colleagues on the ground across the world and supporting customers wherever they need to operate, BT International offers a truly global experience. Whether it’s about providing cloud connectivity, helping organisations collaborate, or enabling innovation in cybersecurity and digital services, you’ll be part of a team that shapes how businesses succeed in a world that is being transformed by AI.
• The security of International’s products and platforms underpins our mission to be the market leader in secure multi-cloud connectivity for our customers. This role is at the heart of building security into International’s products and platforms, using modern, threat focussed security methodologies to ensure all security risks are idenfied and appropriately treated from design through to in-life operations. You’ll be embedded with the teams defining and building our platforms, building upon your security expertise in networks, software and cloud, and working closely with wider BT Security teams and our supplier community to embed secure by design and secure by default into everything we do.

What you’ll be doing

• You will be the security authority for a large proporation of International judicious products and platforms, capable for establishing and maintaining threat models that are the heart of our threat led security approach.
• Implement and oversee interventions in response to issues identified proactively from the threat modelling, or reactively from assurance activities such as penetration testing or assurance reporting. You’ll be driving activity across pan-BT teams, including through our supply chain in our drive for Secure by Default.
• Promote a strong security culture across the engineering teams and suppliers you’ll work with, demonstrating modern security approaches aligned with agile implementation methodologies.
• Act as a security advocate and be an authority for technical security approaches you lead for on behalf of the International Security team, including external stakeholders to demonstrate security thought leadership, innovative thinking, and adoption of latest industry best practice.
• Be a coach and guide for the wider security community on threat led secure by design, adoption of modern security approaches such as zero trust, and growing future talent

Essential Skills / Experience

• Network, IT, and data security expertise
Deep understanding of network security, IT infrastructure, and data protection—especially within Telco and SaaS/PaaS environments.
• Communications and influence
Ability to communicate effectively and ensure engagement of all members of the agile teams you’ll be embedded in, as well as influencing judicious direction at director level. This includes engagement with external partners and suppliers.
• Threat Modelling and Secure by Design
Proven capability to assess designs, clarifying for detail where needed, to identify security threats to the design and through collaborative working with the squad identify specific point controls to mitigate and monitor. You’ll also need to assess how in-life risks factor against the threat models to drive mitigations, and use automated testing methodologies to demonstrate mitigations are established and effectively maintained.
• Commercially savvy
You examine many potential ideas and evaluate each one against business goals and strategy, balancing between technical and procedural approaches with a strong commercial business awareness .
• Curious mindset and self learner
You’ll maintain a deep expertise in aspects of security relevant to this role, and be a self-learner in growing expertise and sharing that knowledge across the wider community.
• Extensive knowledge of security (both physical and cyber) for large scale networks
• A commercial acumen to ensure the imperatives of BT International are delivered at minimum lifecycle cost.
• Strong knowledge of the security methodologies, large scale network security engineering and operational security approaches.
• A very strong knowledge of 3rd party solutions for security management.
• Extensive technology vulnerability assessment and a working understanding of the tooling and AI techniques to manage security.
• An ability to influence strategy of BT Group security Director level.
• Owning and driving security improvements to optimise performance