Senior Security Specialist - Contract - London
Why is our Threat and Vulnerability Management team the next step for you?
Our Security Specialist will be working within the Threat and Vulnerability Management team specialising in penetration testing coordination. The team is responsible for managing the identification, analysis and remediation of vulnerabilities in a fast paced technology environment. The teams' duties extend to the entire Worldpay Group; including the UK, India, Canada, Sweden and Brazil and requires working with the members of various business and technology teams to reduce risks across the business.
The team is part of an Enterprise Security function covering various other security disciplines such as advisory and assurance, and there are opportunities both within this group and also other security related functions to grow, diversify and develop.
How will you add value on a day-to-day basis?
The specialist role acts as a conduit between third parties who conduct penetration tests, project managers and technical operation teams, and the business that need to be informed and act on the output of such testing activities. You will be supporting both existing operational assets as well as project teams delivering new systems in order to reduce the overall threat faced by Worldpay.
You will be responsible for maintaining and organising a penetration testing schedule including pre-requisite, execution and reporting activities, as well as determine and document the scope of the penetration testing effort. You will meet and communicate with stakeholders to ensure adequate resources are lined up for the delivery of the penetration testing activities, liaise with various stakeholders and the selected penetration testing vendor to document the Statement of Work (SoW) and agree all required pre-requisites which must be in place before the execution of the penetration tests, as well as ensure the completion of all pre-requisite activities. You will be responsible for raising change requests, ensuring availability of penetration testing vendors, requesting technical documentation and liaising with the Application and Infrastructure teams to ensure availability of a test environment and access accounts.
Managing a demanding workload and be able to prioritise actions based on business and team objectives is a very important part of the role. You will review penetration test reports and re-rank findings as per internal processes, communicate results with the project manager and work with remediation teams for analysis and confirmation of results, as well as ensure that findings related to PCI need to be remediated in accordance to audit timeframes.
What will make you the ideal candidate?
Experience working as a security professional within a complex technology environment is key to the success in this role. You may have a technical penetration testing background or experience taking ownership of penetration testing coordination - and ideally be CEH certified. Prior experience within threat and vulnerability management is ideal, as well as have the ability to analyse technology risks. You will have strong consultation skills working with senior stakeholders across the business, project and development teams - and hold a current industry security related certification (i.e. CISSP, CISM, SANS, CREST, CBEST).
You will have strong analytical skills with the ability to review technical security vulnerabilities and ideally have previous experience in an assurance or governance role.
How is Worldpay changing the world?
We are leaders in modern money. Each and every time you use your debit card or credit card to pay for something, whether online or face-to-face, there's a good chance it happened because of us. On an annual basis our innovations, systems and technology enable billions of money transactions globally. Working with customers large and small, we help them to take your payments quickly, safely and reliably, allowing them to grow their businesses and making your life more convenient in the process. As a leader in global fintech and the largest London IPO since 2011, this is a great time to join us in building for the next phase of the Worldpay journey.
Worldpay is acting as an Employment Business in relation to this vacancy.
City of London
May 18, 2016
May 18, 2017