Description
Prudential is seeking a Senior Manager, Security Innovation to join their Enterprise Security Architecture & Innovation (ESAI) team. The successful candidate will be responsible for building security automation, orchestration, and AI-augmented tooling to improve the efficiency and scale of GISP's security work.
The role involves researching new and emerging technologies, threats, and security approaches to inform what the team builds. The incumbent will work across Prudential's business units in Asia, Africa, and the UK, collaborating with various stakeholders.
Key responsibilities include:
- Building security automation and orchestration workflows that integrate GISP's security tools, controls, and processes
- Applying AI augmentation to improve consistency and effectiveness of security controls and processes
- Researching new and emerging technologies and security tooling
- Translating research findings into practical recommendations and working prototypes
The ESAI team operates in a fast-moving environment, requiring the ability to build practical tooling, exercise sound judgement, and communicate clearly with senior stakeholders.
Security Innovation & Automation:
- Builds and orchestrates security automation workflows that connect tools, data sources, and controls across the security stack
- Integrates disparate security tooling and telemetry into end-to-end automated workflows
- Applies AI augmentation within these workflows where it adds value
- Integrates security checks into CI/CD and infrastructure-as-code workflows
Applied Security Research & Innovation:
- Researches new and emerging technologies and their security implications
- Runs proofs-of-concept, tool evaluations, and experiments to test new security approaches
- Translates research into practical recommendations and prototypes
Awareness, Judgement & Decision Making:
- Maintains situational awareness of the global threat landscape and emerging attack techniques
- Exercises sound judgement on security architecture and tooling decisions
- Operates effectively in ambiguous environments
Collaboration, Ownership & Growth:
- Partners with business, engineering, risk, and compliance stakeholders to prioritise control requirements
- Contributes to the GISP community of practice through internal guidance and knowledge sharing
- Provides guidance and mentorship to junior team members