Cyber Security Engineer

Responsibilities

• Maintain a clear future roadmap for operational Security capabilities, with supporting designs underpinned by robust operational models and Service Wrapper.
• Drive iterative improvements to Security technology to improve overall effectiveness, improve Clarks’ Cyber defences and improve value for money from Cyber Security investments.
• Implement security controls against a 1 to 3-year roadmap and strategy for Clarks’ security infrastructure focusing on a policy of “secure by design”
• Driving the security direction for Clarks in order to protect Clarks’ assets and services based on the defined risks to the business (as specified by the Security Risk Management Team) - Providing a balance between compliance to requirements, delivery times/costs and operability.
• Drive security best practice for the maintaining availability and integrity of Clarks’ infrastructure.
• Act as a technical representative for Security to all stakeholders.
• Evaluate and promote new technology solutions and integration with legacy systems managing standardization, consolidation and simplicity of the final architecture
• Identify opportunities for Clarks’ Cyber Security Operations Team to add value to the business by identifying and resolving security vulnerabilities prevalent in deployed architecture.
• Lead, manage and motivate the Service & Support Team and 3rd party service providers to ensure service is delivered to agreed SLA targets. Provide strategic leadership in the optimisation and execution of the Problem & Incident Management.
• Conduct on a timely basis service review, analyse and review supplier performance against SLAs and contract to assess, discuss and identify areas of non-compliance and manage associated service credits while building and maintaining strong relationships with multiple stakeholders, both internal and external to Clarks.
• Partner with the appropriate stakeholders to ensure that the necessary processes and procedures are in place to maintain or recover the delivery of services in the event of cyber incident
• Works closely with the entire Technology division in ensuring that service levels are continually met. Ensure that potential or actual service disruptions are mitigated and resolved as quickly as possible
• Define and implement policies and procedures relating to the governance of third-party suppliers
• Identify improvements in services, processes, or procedures. Manage via the Continuous Service Improvement register
• Provide input into the design of new or improvements to existing services to ensure that mitigation and contingency plans are appropriately addressed before implementation and transition into support.
• Engage in any other appropriate duties as delegated by line manager.
• Demonstrating the Clarks behaviours through how work is delivered
• Following our Business Code of Conduct and always acting with integrity and due diligence
• Provision of service levels in line with SLAs & budgets
• Road Map for continuous improvement visible through Continuous Service Improvement Register • Strong Business Partnerships with service culture - evidenced through service MBRs/Dashboards

Qualifications

• Understanding of complex IT environments, knowledge of the application space
• Demonstrates collaboration, service excellence, ownership of customer issues ad as culture of continuous improvement
• Knowledge of Clarks applications, infrastructure & systems
• Through knowledge of security Technology tooling, processes, and practices
• Strong verbal and written communication skills. Ability to understand business requirements and how they translate into technology security needs.
• Proven history in partnering with key business stakeholders.
• Ability to work in a complex, time critical and constantly evolving environment
• Proven track record in successfully managing security service within the Technology space
• Understanding of the Clarks organisation
• Experience working within US/UK/APAC markets
• Language skills e.g. Spanish would be a bonus