Skip to main content
Job ID Location Work Location
2103GM Reading Dual Location - Home & Reading Office
Job Type Contract Type Hours Per Week
Professional Full-time
Shift Pattern Closing Date
Standard working week. N/A

Our people make us who we are. We’re a diverse and inclusive bunch, and it’s important you can feel you belong here. We value everybody for who they are and what they bring to the table, supporting one another as we continue to deliver for our customers.

• Demonstrable experience of providing Cyber Security within large scale organisations
• Experience in managing security teams
• Industry or academic credentials in information security
• Significant experience of managing key 3rd Party Suppliers and Partners
• Demonstrable experience of delivering against industry standards frameworks, e.g., Telecoms Security
Framework, NIST SP800-53, ISO27001, Cyber Essentials Plus
• Industry or academic credentials in security or risk management, e.g., CISM, CISSP or relevant
• An understanding of the Security Framework for UK Telecommunications
• Candidates must be SC clearable for this role.
• Participate actively in development of security policies, principles, architecture, and standards.
• Threat Modelling & Mitigation/remediation experience

1. Several years’ experience of information Security and Security frameworks including Governance, Risk and Compliance delivering and operating security solutions
2. Security Team management experience
3. Demonstrable experience of providing effective Cyber Security within large scale organisations
4. Industry or academic credentials in Security, e.g., CISM, CISSP or relevant
5. Demonstrable experience of delivering against industry standards frameworks, e.g., Telecoms Security Framework, NIST SP800-53, ISO27001 and Cyber Essentials Plus
6. An understand of the Security Framework for UK Telecommunications
7. Ensures Three UK Security Policies, Standards and contractual requirements are delivered
8. Provide support in proactive and effective oversight (and where appropriate challenge) of the technology and security risk management frameworks, methodologies, processes, assurance, remediation and reporting activities across the company.
9. Help Information Technology security project and ensure to safeguards accurately at right place on right time.
10. Facilitate coordination between information security systems for project teams
11. Ensure to consider IT system security needs at time of development and implementation.
12. Develop and manage security project level documents and plans such as risk assessments and Pen-testing outcomes.
13. Work with the information security team and conduct vulnerability assessments and Audits to find weaknesses and analyse existing controls effectiveness and suggest remedial action.
14. Assist in reviews of projects, incident debriefs and analysis findings to identify problems and gaps.
15. Perform advisory role in acquisition projects to analyse security needs and controls.
16. Ensure security controls are executed according to prepared plans.
17. Assist with key IT projects to ensure security controls are maintained across
18. Conduct Threat Modelling & Mitigation/remediation activities

• Experience of working with and influencing various levels of management, building relationships and influence across teams and a wider community of other leaders and managers. A clear communicator.
• Ability to lead, make decisions, problem solve and work within teams. Can demonstrate flexibility and agility to move between role types within teams.
• Will have clear subject matter experience of their area (both technical and commercial) and ability to connect and work across multiple domains. Can demonstrate knowledge of their area articulated through key operating elements of people, process and technology.
• Ability to contribute to the development of strategies (and/or service strategies) within their area and understand the importance of the customer experience and how this can be affected by service impacts.
• Will be passionate about the use of data and insight to make informed decisions, solve problems and input to operational and strategic plans. Can demonstrate the ability to gather, analyse and present information in business terms for management and leadership consumption.
• Ability to work in a fast paced changing environment that shows flexibility, resiliency, self- awareness and ability to support other team members.
• Will have experience of working directly with partners to successfully deliver outcomes and will demonstrate an awareness of partner contracts.

TTC Logo

Three are a proud signatory of the Tech Talent Charter (TTC), working across industries to drive greater inclusion and diversity in technology roles.

Can’t find the job you’re looking for?