Data Privacy and Security Professional

Recruiter: Sowmya Reddy

Hiring Manager: Salma Vhora

Career Grade: E

About the role

Provide independent assurance that BT's critical applications are properly governed, resilient and compliant, helping prevent security, regulatory and operational risks before they become incidents. Drive accountability across application owners, technical teams and suppliers to ensure governance, identity and resilience requirements are met, while enabling leaders to have confidence in BT's control environment and overall operational resilience.

What you’ll be doing

• Drive application security compliance programmes to completion (IDAM) particularly Entra ID, CIA and identity-access management onboarding activities, by engaging application owners, vendors and technical teams, chasing progress and removing blockers.
• Provide risk and compliance assurance over BT's most critical applications, ensuring resilience questionnaires, control assessments and governance requirements are completed accurately and on time.
• Hold application owners accountable for regulatory and governance actions, issuing targeted actions, monitoring progress, escalating delays and ensuring commitments are delivered.
• Identify and help remove obsolete or unmanaged technology assets, including applications that are no longer in use and should be decommissioned or removed from governance inventories.
• Bridge between security, risk, application owners, vendors and technical delivery teams, coordinating conversations and ensuring everyone understands what actions are required.
• Support governance and access-control improvements across BT platforms and services, including SharePoint access governance and permission reviews.
• Provide senior management with assurance, status reporting and issue escalation, translating operational activity into actionable updates for leaders and intervening where progress is insufficient.
• Drive application resilience assurance for BT's most critical applications through CGP/MyAssets governance activities, ensuring resilience questionnaires are completed, data is accurate, overdue actions are resolved, and critical application risks are visible to senior leadership.

Essential Skills / Experience

• Proven experience delivering application security and compliance programmes
• Knowledge of identity and access management, including Entra ID onboarding
• Experience managing risk assessments, resilience reviews and governance actions
• Ability to coordinate application owners, vendors, security and technical teams
• Strong ownership in tracking actions, challenging delays and driving completion
• Experience producing clear status reports and risk updates for senior leadership
• Exposure to application lifecycle governance and decommissioning obsolete assets

BT is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.