Security Engineer

In this role you will establish and mature governance for technology, cybersecurity, privacy and digital risk within Marketing & Communications. You will translate enterprise requirements into practical governance, controls and guidance that teams can apply. You’ll create visibility of risks, obligations and remediation while maintaining distributed accountability. You will work across business and policy specialists to enable responsible innovation and faster, compliant technology decisions. This is a hands-on, cross-functional governance role with a clear impact on risk management and operational effectiveness.

• Establish and continuously improve governance for technology, cybersecurity, privacy and digital-risk obligations across Marketing & Communications
• Translate enterprise requirements and security standards into practical processes, controls, guidance and scalable ways of working
• Create visibility of material risks, compliance obligations, exceptions, open issues and remediation actions
• Strengthen application and access governance, including ownership, certifications, reviews, evidence and audit readiness
• Advise teams early when evaluating new technology and help them navigate required governance and approvals
• Coordinate risk and compliance considerations across the technology lifecycle, from introduction and renewal through ownership change and retirement
• Partner with Cybersecurity, Privacy, Legal, OCTO, Procurement, application owners and platform teams to clarify requirements and resolve complex issues
• Identify recurring friction and opportunities to simplify or automate governance while strengthening accountability

• Deep experience in governance, operational risk, compliance, information security or a related discipline
• Strong working knowledge of cybersecurity, privacy and technology risk in a large enterprise environment
• Experience translating complex policies, standards and control requirements into practical operating processes
• Understanding of application and access governance, audit readiness, evidence requirements and technology lifecycle controls
• Pragmatic problem-solving skills and the confidence to work through constraints with business and technical stakeholders
• Evidence of influencing accountable owners, driving follow-through and escalating material issues without taking ownership away from others
• Strong consulting, facilitation, communication and change-leadership capability
• Ability to synthesise complex risks, dependencies and requirements into clear priorities, decisions and actions
• Experience in a regulated sector such as financial services, pharmaceuticals, healthcare or government is helpful
• A broad and adaptable background across different roles or environments is also valuable

• consulting
• facilitation
• communication
• governance
• operational risk
• information security