Job Description
Career Opportunities: Historical Matters IT Security Assurance Lead (12909)
Requisition ID 12909 - Posted - Information Technology (Information Technology) - Information Technology (Information Technology) - Finsbury Dials (Admin Site) (141550) - Information Technology - Fixed Term Contract - Full Time - South East of England
Grade: 3A
Contract Type: FTC
Location: London / Chesterfield
Reporting to: HM Horizon IT - HO Security, Risk and Investigation
Division: CIO
The Purpose of the Role
The HM Horizon IT Assurance will support the Horizon HM IT Head of Security, Risk and Investigations.
The Assurance Lead is responsible for the Security Assurance for the Post Office’s core IT system, Horizon. This system covers all functional areas of the business, including branches.
The specialist is part of a high performing team (HM Horizon IT) that is focused on addressing matters that were raised in a high-profile Group Litigation where issues/ queries were raised about the Horizon system. These matters need to be addressed in a robust and auditable manner. It is the specialist’s role to bring to the team subject matter expertise and knowledge, applying this to work done by themselves, the team and third-party suppliers with the aim to establish the role of continuous assurance within the team.
Principal Accountabilities
- Operate as the subject matter expert for Security Assurance for the HM Horizon IT team in the triage, investigation, remediation, audit and continuous assurance of Horizon.
- Through problem solving skills and subject matter expertise, challenge the Horizon suppliers to demonstrate and evidence that they are applying (and have applied) adequate and robust security controls and assurance for their areas of responsibility.
- Maintain a high cadence of output, working with the team to establish robust, auditable and efficient processes and controls in the addressing of Horizon matters.
- Support the creating of security related designs that align to IT security standards and architectures at the Post Office, utilising subject matter expertise and knowledge developed over time of the Horizon system.
- Assure and audit the development/configuration activities done by third parties.
- Assure and audit existing Horizon system.
Qualifications, Experience & Skills
- Educated to degree level or equivelent
- Ideally CISSP or other similar security qualification (potentially former CLAS consultant).
- Experience of ITIL (in particular Incident Management and Major Incident Management).
- Extensive knowledge of IT security controls, technical and process best practice including current frameworks and standards such as COBIT, ISO27001 and NIST.
- Demonstrable skills in leading the design and security assurance for environments with complex IT systems with high security requirements.
- Experience of undertaking technical assurance work, ideally within a regulated environment (ideally PCI-DSS, FCA and GDPR)
- Demonstrable ability to work autonomously, able to shape and define own work with the goal of problem-solving complex IT issues whilst supporting the wider team.
- Proven ability to assess and undertake due diligence of the security posture for systems, particularly when involving retail branch networks.
- A confident written and verbal communicator, able to clearly explain ideas to non-technical audiences, and work effectively with non-technical colleagues and business executives.
- Working with the risk and governance teams to deliver a reliable, manageable and secure technology solution.
About Post Office
The Post Office has thrived at the heart of high streets and local communities across the UK for over 370 years. As one of the country’s most trusted brands, we take our commitment to providing essential services to customers across the UK very seriously. We’re the UK’s largest retail network, as well as the largest financial services provider in the UK, with over 11,600 branches nationwide – more than all of the UK’s banks and building societies put together.
We know that the best way to provide a great service for customers is to evolve our business and adapt to their changing needs. That’s why we have a range of over 170 products and services, from personal financial services like banking, insurance, payments and travel money, to telecoms and, of course, mails. And we’re improving our online and in store experience for customers. We know that our customers never stop changing, so neither will we.
Securing the future Post Office’s future:
We are working hard to ensure that the next chapter of the Post Office’s history is a bright one. We are the current guardians of an iconic business and we want to hand over a thriving network of branches which can continue to provide essential products and services for our customers for many years to come. This is a uniquely exciting and challenging time for the Post Office – we’re shaping the future and creating a business we can all be proud of.
Working at the Post Office:
Post Office colleagues are the driving force behind our business. Whether they are in our branches or supporting from our offices, we are proud of the energy, commitment and customer focus our people all have in common.
All Post Office people are guided by our three values and behaviours:
- We care by always thinking customer
- We strive to make things ever better through honest challenge
The Post Office embraces diversity and inclusion in the workplace and actively promote working without discrimination. We are also a Disability Confident Employer and are committed to interviewing disabled people who meet our minimum criteria for the job.