Security Assurance Specialist

ABOUT US

We’re building Tomorrow’s Connections Today, bringing people together through the power of our technology.

Liberty Global is a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.

With our investments in fibre-based and 5G networks we play a vital role in society, currently providing over 85 million fixed and mobile connections and rolling out the next generation of products and services, while readying our networks for 10 Gbps and beyond.

We’re creating national champions, combining the best broadband and mobile networks under brands such as Virgin Media-02 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Sunrise in Switzerland, Virgin Media in Ireland and UPC in Slovakia.

Liberty Global Ventures, our global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure, including strategic stakes in ITV, Univision, Plume, Lionsgate and the Formula E racing series.

Our scale enables us to transfer knowledge and expertise across our operations and investments, creating a dynamic family of brands united in the pursuit of innovation and excellence.

And we’re prioritising diversity, equity and inclusion in our workplace and communities, while reducing our impact on the environment. We are using technology as a force for good; for our people, our partners and the planet.

JOB PURPOSE

The role will support the Group Security Oversight and Assurance Team in providing assurance of security oversight and controls across Liberty Global, Markets, JVs and Growth Markets. The role effectively delivers through the understanding and provision of findings, guidance and monitoring, related to regulation, legislation, international standards and industry best practice for security.

The role will be responsible for undertaking allocated assurance activities relating to controls, processes, and oversight of the business and security. They will also be required to provide improvement opportunities and guidance to the business and feed into KPIs and metrics which reflect the current status of security; and which will support governance reporting.

The role will ensure the business is acting in compliance with the internal Security Control Framework, Security Policies and Standards, plus relevant external Legal and Regulatory requirements. Ad-hoc support of external certifications may be necessary. The role will be expected to provide support to the business on policies and standards; they will work with control owners, performers and management across the organisation, Markets and Growth Markets; and where required, external agencies.

KEY ACCOUNTABILITIES

• Developing a thorough understanding of the business’s Security Control Framework, Security Policies and Standards.
• Maintenance of the business’s Information Security Assurance System; including ownership of relevant assurance functions, documentation and tools as directed.
• Provide assurance around control design and operational effectiveness and application across the business and scope of responsibilities.
• Utilise defined assurance methodologies.
• Provide subject matter expertise across the business to ensure security is embedded appropriately.
• Work with the business to understand organisation changes and effects on security and processes.
• Follow the activity of LG Security through to the business, to ensure controls are delivering required outcomes.
• Update and maintain KPIs, metrics and reports for team and business stakeholders.
• Work with operational areas, business teams, and management to ensure security requirements are understood, deployed and underpinned by management commitment.
• Take responsibility for carrying out planned assurance activity, delivering clear reports against the allocated aspects of the internal assurance programme.
• Capture, manage and track to completion all corrective actions arising from assurance activities and other improvement activities.
• Present recommendations and improvements to areas, maintaining an impartial and objective position using data and facts to support assurance outcomes.
• Support the business in resolving shortcomings and security issues to promote greater capability and facilitate continual improvement, using appropriate recognised tools and techniques.
• Assess compliance, control effectiveness and assurance findings for trend analysis.
• Ensure that any identified security risk is captured and fed into the relevant risk team in line with the corporate risk methodology.
• Other Security assurance initiatives as required.

Key Interfaces for the role are:

• Interfacing with Security Oversight and Assurance Management to report against assurance and compliance.
• Liaising with the wider Security function to deliver KPIs and Metrics.
• Interfacing with all LG, Global and Local security teams as directed by the assurance programme.
• Interfacing with the business to ensure the requirements of the Security Control Framework, Security Policies and Standards, and external requirements are being met.
• Liaising with external bodies and assessors.
• Engaging for external third party support.
• Engagement with internal stakeholders.

KNOWLEDGE & EXPERIENCE

ESSENTIAL SKILLS & ABILITIES:

• Proven experience of undertaking security assurance, minimum 3 years.
• Experience in an information security role in a large and complex commercial organisation.
• Knowledge of one or more technical security areas, such as; Security Architecture, Cloud Security, AI Security.
• Excellent documentation and report writing skills.
• Effective verbal communicator to ensure engagement across the organisation.
• The ability to manage and prioritise workload.
• Continuous improvement and growth mindset.
• Customer and stakeholder focussed with attention to detail.
• Ability to adapt approach and content to audiences across operational, security, and management domains.

DESIRABLE SKILLS & ABILITIES:

• Educated to a degree level or holding one or more professional qualification (e.g. CISSP, CISM, CISA, Comp TIA Security+ or equivalent).
• Knowledge of Penetration Testing and other Security Testing.
• Knowledge or experience of the Telecom Industry.
• Knowledge or experience of emerging technology.
• 3 years of experience in an information security role in a large commercial organisation.
• Knowledge and experience of working internationally.
• Experience of a large, complex, global matrix organisation.

PREFERRED EDUCATION / QUALIFICATIONS:

• Recognised Security Certification (CISSP,CISM, CISA, Comp TIA Security+ etc.)
• Recognised auditing certification (ISO 27001, CISA etc.)
• Knowledge or experience of the telecoms industry

* Liberty Global is an equal opportunity employer. We embrace diversity and are committed to creating an inclusive environment for our people. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process. We’re 100% committed to having a workforce that represents every part of our society. So we’re keen to hear from candidates of all background and circumstances.