Security & Risk Product Owner

at  Penneys

SECURITY & RISK PRODUCT OWNER

Our Technology teams are right at the heart of what we do. Surrounded by some of the best Security professionals in the industry, you’ll bring your own ideas to the business - helping to shape the experience of our customers as part of a forward-thinking team.
This role shall be responsible for developing and owning the future security and GRC strategy in regard to products, platforms, services and development of standards, identifying and responding to new requirements based on business strategy and IT operations. The role will work closely with the architecture and infrastructure teams along with Security to ensure the right platforms / products are deployed and maintained, maximizing the value while always looking over the horizon for future options.

WHAT YOU’LL DO:

In your role, you’ll collaborate with different people across a range of skillsets. Here’s a flavour of your day-to-day:

• Own the development of the technical security and GRC roadmaps for all tooling and processes.
• Develop strategies for components such as DLP and BYOD, in collaboration with all stakeholders.
• Monitor industry trends, ensuring we remain current with our approach. Own and manage relationships with key partners and technology providers, influencing their product roadmaps where it benefits Primark.
• Build strong relations, ensuring always included in the assessment and choice of group platforms.
• Support infrastructure solutions selection and deployment that benefit security and support the mitigation of risk.
• Continually assess Primark technical security posture looking for opportunities to reduce risk and implement / automate controls.

Here at Primark, we want everyone to feel valued – so please bring your authentic self to work, of course with some other key experience and abilities for this role in particular:

• Proven professional experience in IT infrastructure and cyber security.
• Experience in a similar role developing product and platform roadmaps, performing technical assessments and undertaking R&D.
• Good knowledge of cyber security industry, products and service trends.
• Extensive knowledge of current cyber security threat types and potential mitigation controls.
• Breadth and depth of knowledge of standards such as NIST, MITRE, OWASP.
• Capability of discussing technical issues in a non-technical way.
• Strong understanding of the business relevance of security risks.
• Pro-active, with the ability and confidence to drive forward discussions, co-ordinate activities, make judgements and take decisions