Description
- Lead and operate Cyber EDUC 2 control to test and train software developers considered as High Risk Users from a cyber perspective
- Mature the EDUC 2 control to include other technical audiences
- Working closely with user research Cyber control owners eg Data Security Vulnerability Management
- Identity and Access Management and vulnerabilityincident data analysis to inform the design and delivery of cybersecurity training to any technical audience
- Using data and insights to demonstrate the effectivenessimpact of the solutions you deliver
- Using your subject matter expertise you can design proxy measures to demonstrate how training solutions support our overall outcomes We want to measure more than just our output eg courses completed and demonstrate an impact on engineering metrics such as reduced incidents reduced time to remediate or reduction in recurring vulnerabilities
- Work closely with the Cybersecurity Assessment and Testing CSAT function Global Engineering CTO
- DevOps Services to gather inputs validate and test the impact of proposed training and ultimately implement joined up solutions to our target audience
- Through a datadriven approach identify gapsopportunities in our security training tooling and design and deliver pilots to address these opportunities This could include identifying and trialling 3 rd party vendors
- Support from a communications and training perspective any initiatives empower and enable technical roles to operate more efficiently and securely
Key Skills and experience
- Strong relationship building experience and persuasion skills including experience where you have previously worked with numerous partners to find common agreement and deliver a common solution
- Strong technical subject matter background in application security DevSecOps andor identity and access management
- You may be an engineer at heart but have proven experience of stepping out from being a practitioner and now use your unique insider experience to deliver transformational enablement programmes to engineers eg Training and development Change ManagementTransformation Internal engagement and culture change
- Design thinking Experienced in creating needsbased solutions that are also measurable and materially reduce risk
- Experience of being part of enabling initiatives for technologists at scale with proven results
- Ideally experience of using or managing third party training vendors and platforms
- Excellent understanding of Security concepts and principles
- Good understanding of security flaws in different programming languages
- Understanding of emerging technologies and its corresponding security threats would be a plus
Skills
Mandatory Skills : Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Cybersecurity & AI Laws
