Job Description

Role Purpose

Role Title – Security Consultant 
Our Security Consultancy and Design team are continuing their search for Cyber 
Security Consultants who have a broad knowledge of Cyber Security domains and 
controls working across a wide range of computing platforms. Join our Chief Security 
Office here at Lloyds Banking Group as we build the bank of the future.
Location(s): Manchester, Leeds, Bristol, Halifax, Edinburgh.
Contract: 3/6 months 
Hours: Full time.
Working Pattern: Hybrid, 40% (or two days) in an office site.
About this opportunity
Are you someone who wants to be in the heart of Cyber Security delivering change and 
working in an agile way, ensuring we execute our strategy and transformation agenda 
safely? Then we have the perfect opportunity for you.
We are actively welcoming enthusiastic Cyber Security Professionals from all industries 
and backgrounds to join our expanding team as we embark on an exciting journey where 
you will have the opportunity to ensure security by design is embedded across our 
change portfolio.
Cyber Security sits at the heart of our business providing the Group with a secure 
operating environment, safe from malicious attacks. It is a dynamic and constantly 
evolving world where your experience and efforts can deliver tangible results to the 
safety of a huge company and over 30m customers.
We’re on the mission to build the bank of the future, and we need your help to do it!
What you'll do:
• Applying Agile methodologies to support engineers and deliver on multiple 
challenging product initiatives simultaneously, driving engineering excellence.
• Threat model by deconstructing technical solutions, identifying threats and 
vulnerabilities and assessing risks.
• Use experience to analyse the risks and benefits of design options to support 
making safe architectural decisions.
• Design secure solutions documenting the key security controls and adhering to 
security standards.
• Define security testing requirements and assess findings.
• Effectively communicate technical concepts to both technical and nontechnical audiences, providing security direction, governance, assurance and 
guidance.
What we're looking for:
• Dynamic solution-oriented individual bringing energy to a rapidly evolving 
environment with an ability to work well under pressure. 
• Broad knowledge of modern Enterprise technologies including Cloud and AI
• Exposure to contemporary architectures eg. RESTful APIs and containerised 
microservices.
• Up-to date on emerging threats and experienced with threat modelling 
frameworks eg. STRIDE / MITRE ATT&CK.
• Significant knowledge of cyber security domains and how they apply to 
Enterprise business environments eg. endpoint, network, cryptography and IAM.
The nice to haves:
• Awareness of industry related security standards such as ISO 27000 series, PCI 
DSS, COBIT, NIST, OWASP.
• Certifications in security management eg. CISSP / CISM / CCSP or equivalent.
• Certifications in technical security domains eg. CEH / OSCP or equivalent.
• Experience of Public and or Private cloud environments.

͏

i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives

ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture

iii. Depending on the client’s need with particular standards and technology stacks create complete RFPs

iv. Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology

v. Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions

vi. Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps

vii. Evaluate and recommend solutions to integrate with overall technology ecosystem

viii. Tracks industry and application trends and relates these to planning current and future IT needs

͏

Deliver