Data & AI Security Operations Specialist

Why BT?We've always been an organisation with purpose; to use the power of communications to make a better world. You can trace this back to our beginning as pioneers of the world's first telecommunications company. At our heart we're a technology company with research and innovation in our bones and a desire to be personal, simple, and brilliant for our customers - those are the values we live by whilst also creating an inclusive working environment where people from all backgrounds can succeed.Our pursuit of progress over the past 180 years has established BT as a strong, successful brand, with huge scale capable of achieving great things. From supporting emergency services, hospitals, banks and keeping economies around the world online, safe and secure, to delivering large scale technology infrastructure like the creation of BT Sport.Today in this fast changing, always on, digital world our purpose remains true. Yet the market conditions, regulation and competition we face are tougher than ever before. So if you have the drive, optimism and resilience to help propel us forward we'll offer unrivalled personal development, a wealth of opportunities to learn, experience new things and pursue new careers. If that's you and what you're looking for, we'd love you to be part of our future. Why this job matters The Data and AI Delivery Unit is using innovative ways of leveraging BTs data such as AI and Machine Learning techniques to make better data driven decisions and to drive revenue in both our on-prem and Google Cloud Platform estates. As part of this ambition, it is key to deliver safely, protecting the data at every stage.The data in GCP is a huge and valuable asset to BT and in response BT must develop, deploy and run key processes, measurements and capabilities to protect this data. This role is required to ensure the right defence mechanisms are in place and that these are effective within CDH/GCP and where necessary the wider BT estate. What you'll be doing • Must understand how to protect data BTs data in a cloud environment (GCP experience is preferred)• Must understand the role of data in relation to Business process and systems• Must classify the data and apply the appropriate controls• Is responsible for ensuring that data is protected appropriately whilst at rest and as part of its journey into and through GCP• Provides 2nd Line SecOps – working with the GCP Core SecOps Team to mitigate any identified risks• Runs the Security Guide, Trust, Verify Model to ensure empowerment of users whilst helping them to comply and checking to ensure they do. This will incorporate 1st Line Assurance - Accountable for ensuring the effectiveness of security controls as they apply in GCP• Provides guidance taking the squads from DevOps to a DevSecOps Model• Is responsible for the assessment of new code pipeline patterns to ensure there are no security risk such as the potential for sql injection• Creates a change network that builds consensus and momentum for change with join purpose, learning, decision making and accountability across different teams.• Provides clear communication and engagement plans with stakeholders• Ensure that the data is appropriately secured in the GCP estate based on how it will be used, who will have access to it etc• Scope of existing controls and if any new ones are needed and if so how this will be implemented. Skills and Experience Required Skills Required:• You will have a DevSecOps mindset, with security being job number one• Understanding Data and how to leverage its value in a safe way. Industries where this is key could be Banking or Telcos.• Excellent knowledge of Regulation and Industry Standards and Legislations, e.g. GDPR and PECR and applying the right controls to comply. Also• Expertise in applying the right security controls in an Analytics environment to ensure balance is maintained between securing the data and retaining the utility of the data. This will include techniques such as Encryption, Fine Grained Access Control, Tokenization and Retention• Stakeholder Management: Managing expectations and the level of stakeholder engagement. Ability to manage to complex political relationships in a variety of business and technical situations. Influence and engage with stakeholders in decisions based on analysis of their needs, interests and impact. Use empathy and the right language to avoid misunderstanding.• Security Experience: Experience is needed within several areas, such as Security Architecture, DevSecOPs and Vulnerability Scanning.• Problem Solving: Uses judgement & experience to solve often highly complex and abstract problems across the domain, such as launching new products and services, solving customer experience problems. Includes defining and alignment to business strategy.• Automation: Have an eye for automation opportunities to save man hours and costs.Experience you would be expected to have• Technical Solutions: Demonstrates a breadth of technical acumen and commercial insight to determine how to solve problems through the use of technology and innovation including in Google Cloud Platform• Data Knowledge: How to get the best out of the data whilst ensuring its safety• Security Expert: Expert knowledge of IT Security policies, objectives, controls and remediations and significant experience in a senior IT Security role.• Customer Experience: Experience in understanding the fundamental customer experiences that drive NPS, customer satisfaction and churn.• Cloud and Security Certified: Experience of working in Cloud Environments. Cloud Security Certifications(CISSP) is preferred to have. Our leadership standards Looking in:Leading inclusively and SafelyI inspire and build trust through self-awareness, honesty and integrity.Owning outcomesI take the right decisions that benefit the broader organisation.Looking out:Delivering for the customerI execute brilliantly on clear priorities that add value to our customers and the wider business.Commercially savvyI demonstrate strong commercial focus, bringing an external perspective to decision-making.Looking to the future:Growth mindsetI experiment and identify opportunities for growth for both myself and the organisation.Building for the futureI build diverse future-ready teams where all individuals can be at their best.A FEW POINTS TO NOTE:Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.DON'T MEET EVERY SINGLE REQUIREMENT?Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.