Role: Cyber Engineer (Workstream Lead)

Location: Edinburgh (Hybrid)

Duration: 6 Months

Day rate: 700 - 850 inside IR35

Role responsibilities:

• Set, maintain and deliver cyber security strategy
• Deliver a cyber security work stream that is hardening our egress controls
• Work with Architecture to turn strategy into operational roadmaps and project plans
• Provide cyber security expertise to lead and support security and business change portfolios
• Ensure key business risks are fully understood, controlled, and mitigated to ensure local plans are delivered and we meet regulatory requirements
• Undertake product analysis
• Design and implement security technologies to mitigate cyber risks in line with strategy
• Take ownership of analysing security outputs and reports to drive improvements
• Provide 3rd line support operation

Core functional/technical skills

• Be able to lead and define governance exception processes for egress controls (what should and shouldn't be allowed)
• Be familiar with web proxy design rule bases, firewall role bases and best practice
• Able to work independently and with peers to achieve best practise in egress controls
• Be able to work with a team defining processes, governance and oversight egress controls
• Background may be in solutions architecture, network engineering, cyber engineering or control design or similar
• Knowledge of cyber security assessment processes for web access requests in enterprise environment
• Knowledge of web access controls: DLP, Content filtering, TSL inspection, Proxy authentication, Malware scanning etc

Capabilities

• Security certifications
• Solution design skills
• Exposure to setting and delivering strategy
• Stakeholder management
• Hands on technical skills within technology function
• Experience within the IT security field
• Risk and control management experience
• Experience of working with third party providers