Application Security Manager

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.
Application Security Manager
Job no: 502245 Work type: Permanent Full Time Location: London - Hybrid Categories: Information Technology, Digital Development, Information Security
Your new role at NewDay
At NewDay our platform provides £9B of lending to 5M consumers, issuing roughly 1 in 5 new credit cards in the UK.
We are looking for someone to lead our Application Security team to help us secure our modern cloud-native platform. You will help by:
Building and scaling out a secure engineering culture, working with teams to embed secure engineering practices & secure-by-design principles
Driving the Application Security Roadmap
Working with key collaborators such as product owners and engineering managers so that we can explain and understand our security challenges and prioritise remediating security defects to produce secure products
Provide insight and reporting of Application Security risk in terms that can be shared with different audiences
About NewDay
We help people move forward with credit, and help our colleagues to move their careers forward too.
We use our highly flexible, scalable, and multi-product digital credit engine to power over 120 million transactions every year. Our brands include Aqua, marbles, fluid and Bip. We partner with leading brands such as John Lewis, AO, Argos and DEKO.
Over 5 million UK customers are supported by our award-winning customer service.
What you will get
Leading a dedicated and capable team
Working with our outstanding engineering and product teams!
Ongoing training and attendance at industry events
Flexible working arrangements
Your Skills and Experience
We need knowledge, experience & expertise in:
Leading application security engineering teams
Scaling out Application Security to a large number of software engineers
Worked in FinTech, consumer lending, payments, or card issuing
Contributing to the planning and building of roadmaps
Good understanding of security risk management in an Application Security context
Security and compliance frameworks and standards, e.g. PCI-DSS, ISO 27001, GDPR
And would love you to know or learn:
Proficiency in some of C#, .Net, Java, JavaScript/Typescript
Authentication solutions using OAuth 2.0, OIDC, for B2C, and machine/worker identities
Securing REST and GraphQL APIs and API Gateways
DevSecOps tooling, e.g. SAST, DAST, SCA, and security unit tests
Secure software design principles
Modern software design and architecture patterns, such as serverless, API-first, BFF API, and event-driven architecture
Relevant certifications
Your Personal Attributes
Has a problem-solver and builder mentality.
Builds partnerships through teamwork and pulling together
Applies critical thinking to security risks, providing defensible recommendations
Able to influence peers to do the right thing - provides convincing and persuasive rationale focusing on risk and "the why"
Diplomatic, emotionally thoughtful, listens and is open to other points of view
Able to communicate sophisticated technical topics in straightforward terms to a diverse group of team members
Challenges conventional thinking and demonstrates a "continuous improvement" demeanour which is building for tomorrow
Our dynamic NewDay Culture
At NewDay, we value all types of diversity. We're an equal-opportunity employer and believe that our differences create a vibrant, authentic working culture. We want all our colleagues to feel able to bring their whole selves to work. We don't discriminate on the basis of age, physical or mental disability, gender reassignment, marriage and civil partnership, pregnancy and carer status, race (including colour, nationality, and ethnic or national origin), religion or belief, sex and sexual orientation. We make sure that every job is crafted to be inclusive and that people with disabilities or caring responsibilities can take part in the application and interview process. Tell us if you need accommodations: we'll put reasonable adjustments in place to support you.
We're focused on what will drive impact in helping people move forward with credit. Our distinctive culture is geared to spark innovation and team working - with lots of open doors for development. Our customers can rely on us because we aim high, support each other, do the right thing and build for the future.
We invest in our colleagues. On top of a strong market-competitive salary, you get a bonus opportunity that matches the impact (delivery + values) you drive in your role. We also help you retire better with market-leading pensions.
At NewDay, #yourwellbeing matters: You get 26 days of holiday and can buy up to 5 more after probation. Then you'll get extra days as you build your career with us.
NewWork, our flexible, hybrid working approach, helps you to manage your work/life balance - and even bolt on work time in other countries before or after your holiday. And when you're in the office, you get free, healthy breakfast, fresh juices, lunch, barista coffee etc
Our tax-efficient green car and cycle-to-work schemes save you money (and help the planet).
Ask your Talent Acquisition Partner to tell you more about any of our perks.
Advertised: 07 Feb 2024 GMT Standard Time Applications close: 17 Jun 2024 GMT Daylight Time
#J-18808-Ljbffr