Job responsibilities
- Embed threat modelling, security design & architecture reviews into product and application teams so they adopt our control products and create products that are secure from the start
 - Proactively monitor Key Risk Indicators to ensure issues are identified, quantified, communicated, and managed in a timely manner, including recommendations for resolution, and identifying the root cause/key themes
 - Regularly provides technical guidance and direction to support the business and its technical teams, contractors, and vendors
 - Works with stakeholders and senior leaders to recommend business modifications during periods of vulnerability
 - Serves as function-wide subject matter expert in one or more areas of focus
 - Actively contributes to the engineering community as an advocate of firmwide frameworks, tools, and practices of the Software Development Life Cycle
 - Influences peers and project decision-makers to consider the use and application of leading-edge technologies
 - Adds to team culture of diversity, opportunity, inclusion, and respect
 
Required qualifications, capabilities, and skills
- Hands-on practical experience delivering enterprise level cybersecurity solutions and controls via Threat Modeling and Security Design & Architecture Reviews
 - Advanced in one or more programming languages and demonstrated ability to review source code to identify security flaws and recommend secure coding patterns
 - Advanced knowledge of cybersecurity architecture, applications, and technical processes with considerable, in-depth knowledge in one or more technical disciplines (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
 - Ability to tackle design and functionality problems independently with little to no oversight
 - Strong written and verbal communication skills
 - Demonstrated success in influencing peers inside and outside your department
 - Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture
 - Experience of operating in a regulated organization with a 3LoD (Line of Defence) model
 - Willing to challenge the existing regime and process, in a respectful way
 - Experience translating firmwide policy or regulatory requirements into control design and definition for Software Engineers and Solutions Architects
 - Proven experience of upskilling and learning modern technologies
 - Experience in financial services consumer businesses or Fintech Organizations
 
Preferred qualifications, capabilities, and skills
- Experience of operating in a regulated organization with a 3LoD (Line of Defence) model
 - Willing to challenge the existing regime and process, in a respectful way
 - Experience translating firmwide policy or regulatory requirements into control design and definition for Software Engineers and Solutions Architects
 - Proven experience of upskilling and learning modern technologies
 - Experience in financial services consumer businesses or Fintech Organizations