Join to apply for the Senior Information Security Architect role at BBC.
4 days ago Be among the first 25 applicants.
Job Details
* Job band: D
* Contract type: Permanent
* Department: BBC Information Security
* Location: All UK (Remote based role)
* Proposed salary range: £75,000 - £85,000
* Flexible working: Discussable at offer stage
Purpose of the Role
The BBC Information Security Team works with BBC teams around the world to provide expert advice, review systems, and deal with threats. We ensure risks are identified, managed and mitigated. We are a multi‑disciplinary team who work together and with the rest of the business to ensure the BBC stays secure and our audience trust is protected.
You’ll be joining the Security Engineering & Architecture team in Information Security. The team’s focus is to ensure the BBC’s digital products and platforms are secure by leveraging our collective development and security experience. To ensure security requirements are considered and implemented, we work with product teams during the early stages of the SDLC and provide our expert technical advice to allow them to progress effectively. The team also designs, develops and deploys systems and processes to help teams understand the risks in their own systems.
Another key part of the team’s function is to foster relationships across the business and ensure that security issues are discussed and actioned rather than ignored. The team runs a large network of Security Champions across the BBC which focuses on awareness and education of technical security topics which helps amplify Information Security’s effectiveness. The team also provides technical expertise to other areas of the wider Information Security Team and BBC.
Key Responsibilities and Impact
* Architecture of Systems.
* Perform security risk assessments on BBC Digital Product environments at various stages of the Software Development Life Cycle (SDLC) and recommend security enhancements, remediation and mitigation strategies.
* Digital Policy & Guidance.
* Research and understand new security technologies, trends and threats related to BBC Digital Products and environments and use this research to provide technical and non‑technical guidance to internal stakeholders and third parties.
* Assist in running the BBC Security Champions network including facilitating sessions, engaging with champions, providing guidance around security queries and continuing to evolve the network.
* Support tactical initiatives to secure Digital Product environments for the BBC, including contributing to Information Security policies, procedures and standards.
* Develop and maintain relationships with Digital Product key suppliers, Digital Product staff, Security Champions and other stakeholders.
* Peer with the rest of the InfoSec team to design, deploy and run code for systems that assist the BBC InfoSec function and help BBC teams understand their current risk posture.
* Support the processes around security issues identified in BBC Digital Product environments, including assisting with investigation, validation and revalidation.
Essential Criteria
* Familiarity with at least one coding language (e.g., Python, JavaScript, etc.) with demonstrable experience of taking an active role in both designing and implementing digital software projects using these languages.
* Ability to convey complex technical knowledge and guidance, in written form and verbally, to multiple audiences including internal stakeholders and third parties.
* Demonstrable ability to break complex problems into tangible parts, self‑direct required learning and operate in a semi‑autonomous manner.
* Experience deploying systems and applications from code to a cloud environment (e.g., AWS).
* Demonstrable experience of a wide range of technical security knowledge and applying this to identify and remediate security issues in digital software products.
Desired but Not Required
* Experience of being involved in a community and taking an active lead in organising and facilitating.
* Experience with STRIDE Threat Modelling and mitigating issues from application security tooling.
Next Steps
Your next step is to submit your application to this page. Your application will be reviewed at each stage and, if suitable, progressed to the next stage. There are a total of three stages:
1. Submit your online application.
2. Complete a technical exercise remotely and submit your completed code to the hiring managers.
3. Attend an interview.
Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. Failure to disclose may result in the withdrawal of your offer.
Disclaimer: This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. It is not intended to be a complete, detailed account of all aspects of the duties involved.
Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include reference checks; eligibility to work checks; and, if applicable to the role, safeguarding and adverse media/social media checks. Any offer made is conditional on these checks being satisfactory.
For any general queries, please contact: bbchr@bbc.co.uk.
Redeployment: The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and will be given priority consideration ahead of other applicants.
#J-18808-Ljbffr