Candidates

Our client in the aviation sector are looking for a Cyber Security Partner to join and lead a team of Risk Specialist's. They are undergoing some dramatic changes within the business and need passionate, analytical and knowledgeable individuals to join their team. Your role will involve accessing the business's security landscape and help ensure cyber risk is understood and guide the business during this transformation.

The Role

• Partner with the rest of the business to ensure risk-based decisions are made to aid continuous improvement
• Whilst providing technical expertise you will understand associated regulations to projects whilst identifying the risk profile, identify framework and potential risks the project could pose
• Understand when to involve other teams within the business including Security Architects and Engineers.
• Have a broad understanding of technical skill sets and train up junior members of the team
• Contribute to the development of cyber security policies and standards.
• Can work with key stakeholders to ensure best practises are adhered to whilst continuously developing the cyber function.
• Ensure team productivity
• Make formal recommendations based on Risk
• Identify and draft various industry standards and frameworks and apply them within the business
• To Develop key bow-tie risk models whilst innovating the business and managing risk

Qualifications

• CRISC ,CISSP or Cyber security MSc

This is a great opportunity for an experienced consultant to join a major client who has won awards for most improved workplace and lead a team. If you are looking to get involved with Enterprise Security, then apply now.

Blackthorn Trace, trading name of Huntress Search Ltd, acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

Are you looking for a position of importance? My client is looking for a Technical Security Architect to help provide resilience across their Cyber teams to ensure they maintain operational capability in the current security landscape. In This role you will be there to support the services which provides data communications to various sites and systems as part of Business Infrastructure and Revenue earning systems. This is a highly technical role but one of vital importance to the day to day running of our client's business.

Key Responsibilities:

• Develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology, threat and customer drivers
• Develop security strategy plans and roadmaps based on sound enterprise architecture practices
• Develop and maintain security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations
• Track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in security strategy plans and architecture artifacts
• Participate in application and infrastructure projects, and commercial product/service development activities to provide security design and consultancy advice
• Draft security procedures and standards to be reviewed and approved
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, identity and access management (IAM) and cyber products and services
• Develop standards and practices for data encryption and tokenization in the organization, based on the organization's data classification criteria
• Conduct or facilitate threat modeling of services and applications that tie to the risk, data and industry drivers associated with the service or application
• Validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Validate security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs and anti-malware/endpoint protection systems for both internal and commercial utilisation
• Review network segmentation to ensure least privilege for network access
• Liaise with the Procurement team to conduct security assessments of existing and prospective vendors, especially those with which theorganization shares intellectual property (IP), as well as regulated or other protected data:
  • Software as a service (SaaS) providers
  • Cloud/infrastructure as a service (IaaS) providers
  • Managed service providers (MSPs)
  • Payroll providers
• Evaluate the statements of work (SOWs) for these providers to ensure that adequate security protections are in place. Assess the providers' SSAE 16 SOC 1 and SOC 2 audit reports (or alternative sources) for security-related deficiencies and required "user controls" and report any findings to the Director, Security Engineering and Procurement teams
• Support the testing and validation of internal and commercial security controls, as directed by the Director, Security Engineering
• Review security technologies, tools and services, and make recommendations to the broader security and product development teams for their use, based on security, financial, operational and commercial metrics

QUALIFICATIONS

Essential Knowledge and Skills:

• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials, is desired.
• Formal training in a relevant enterprise architecture methodology (for example, the Zachman Framework or TOGAF).
• Strong combined IT and security work experience, with a broad exposure to infrastructure/network and multiplatform environments.
• Knowledge of security issues, techniques and implications across all existing computer platforms, including datacenter, networks, cloud (IaaS/PaaS/SaaS), micro-services and emerging/maturing technology platforms.
• Experience in using an enterprise architecture methodology (for example, Zachman, TOGAF and Gartner frameworks).
• Knowledge of a security-specific architecture methodology (for example, SABSA).
• The role is involved in projects or issues of high complexity that require in-depth knowledge across multiple technical areas and business segments.

This is an exciting opportunity to join a global organisation and to find out more apply today!

Blackthorn Trace, trading name of Huntress Search Ltd, acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

Intelligence Data Management & Compliance Project Manager

Location: LONDON | Division: DEFENSIVE | Work Type: CONTRACT | Reports to: OPS MANAGER

How would like the chance to work for a company that is the first line of defence for the music industry? This your chance to help defend some high-profile clients from exploitation and aid in taking down the perpetrators. You will be the data manager for a range of cases where you will be aiding in the; collection, analysis and compliance aspects of data.

Key responsibilities include:

• Review the way in which Evidence & Intelligence are currently handled in Content Protection & shared with internal & external stakeholders, including identifying the main areas of risk
• In collaboration with Legal & IT, define the requirements for sensitive information to be gathered, stored, retrieved, shared & deleted in compliance with current UK regulations;
• Coordinate the implementation of a technical infrastructure for Evidence & Intelligence Management & ensure the adoption of best practices within the Content Protection team, including but not limited to the Digital & Physical Piracy Investigation Unit;
• Document processes & procedures & provide training to the team as required;
• Ensure accurate intelligence logging on IBM's i2 system, including defining the requirements for any necessary reconfiguration of the system;
• Migrate the existing passwords to a password management system (1 Password);
• Oversee the introduction of cloud-based virtual machines & their correct use by all the relevant staff members

Required:

• Solid knowledge of procedures, laws & regulations governing Evidence & Intelligence Management, including but not limited to GDPR & Disclosure regulations;
• Previous experience in working with legal departments & /or law enforcement agencies;
• Good working knowledge of IBM's i2 system;
• Understanding of database architecture, file directories & file transfer protocols;
• Positive mental attitude & high energy approach to work;
• Good communication & the ability to manage different stakeholder interests;
• Ability to document processes & procedures in a clear, modular & accessible way;
• Ability to progress a project ensuring completion within the set time frame.
• With the help of the team & in collaboration with Legal, audit sensitive information held by Content Protection & advise on the deletion of historical data as applicable.

Desirable:

• Law Enforcement/Criminal Law background;
• Familiarity with the concept of information governance for the purpose of legal compliance, operational transparency & legal discovery;
• Previous experience in a compliance role.

Blackthorn Trace, trading name of Huntress Search Ltd, acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

Location: LONDON/ ONSITE | Division: OFFENSIVE | Work Type: PERM | Reports to: PRINCIPAL CONSULTANT

How would you like to chance to work for an innovative global consultancy? This is your opportunity to join a penetration testing team with over 15 years of consistent success. The team within this innovative consultancy work across multiple sectors from; transportation to financial services allowing you to put your skills to the test! You would be part of a global network of security professionals working on projects for FTSE 100 and Fortune 500 clients, with a company ethos that centres around your progression and career.

As part of the red team you will be expected to:

• Have 2 years of full-time penetration testing experience
• Be a self-motivated individual that can work within a large team
• Possess strong communication skills enabling you to converse with all members of a client's organisation with appropriate technical language
• Have experience working on and deployed a range of penetration tests such as; web application, mobile application, and infrastructure and secure code analysis etc.
• Contribute and be interested in delivering CREST accredited hacking training
• Support the pre-sales team with technical knowledge and input
• Produce written and verbal reports to clients of a high standard
• Work within the large network of teams within the consultancy, providing the latest technical knowledge to collaborate with innovative client projects

What the role can offer you:

• The opportunity to gain experience in dealing with a range of clients across multiple sectors who require a plethora of security assessments
• Access to CREST and other technical training courses
• Allocated study time to achieve and maintain CREST and other qualifications which are fully funded
• The ability to develop your own personal profile within the industry through R&D and publishing vulnerabilities
• The opportunity to work on client sites and be fully immersed in a commercial environment that is security-focused

Benefits package:

• Private medical insurance
• Transport allowance
• Pension scheme
• Annual performance-based bonus
• Marketing leading salary
• Lead

Blackthorn Trace, trading name of Huntress Search Ltd, acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.