Job description
Advanced Warning of scheduled maintenance
Due to scheduled system maintenance, our careers site will not be available from Friday 2nd June (11pm GMT) and Saturday 3rd June (5am GMT). During this time you will not be able to submit new applications or continue with existing applications. We apologise for the inconvenience this may cause.
ISSCA PCI Assurance Professional
- Currently PCI, ISO27001, PSN, TBEST, CE & CE Plus and, TSA
- Audit/Assessments - To gain assurance that these are being planned and performed for the assigned business processes by the certification’s anniversary.
- Security Assurance – provides regular evidence-based assurance of BT’s cyber defense compliance at Line 2, and drives improvements to BT’s cyber security risk posture in relation to our current assured certifications.
- Issues and Escalations – To be able to clearly describe the current compliance status for any of the assigned business processes. Identifying issues that requires further action(s) to ensure that the correct steps are taken to protect and preserve our assured certifications. To be formally tracked and if not resolved within agreed timescales the role holder must escalate the matter immediately.
- Driving Change - To ensure that any changes across our various security certification schemes are incorporated within our business processes ‘in good time’ to maintain compliance.
- Communications - Acts as a communications bridge between our various security certifications schemes governance and the ‘working level’ within allocated business processes.
- Security Forums - Running relevant governance forums relating to the enactment of certification & assurance schemes where required.
- Risk Management - Identifying, collating, and communicating and monitoring risk management plans that affect certification.
- Sharing best practice and approaches with peers and first line teams to drive consistency and adherence to certification requirements
- Champion for driving compliance for BT BAU security and certification schemes.
- Maintaining high productive and effective working relationships with first line teams in the CFUs, product and capability owners.
- Working as part of an effective matrix team pan-CFU to enact components of certification.
- Facilitating dialogue with external parties, control boards & regulators etc.