At a Glance
- Tasks: Act as a trusted advisor on security for third-party integrations and manage cyber risk.
- Company: Join M&S, a leading retailer with a commitment to security and innovation.
- Benefits: Enjoy discounts, competitive holidays, bonuses, and a strong pension scheme.
- Other info: Flexible work environment with excellent training and wellbeing support.
- Why this job: Make a real impact in cybersecurity while working with diverse teams globally.
- Qualifications: Experience in security domains and risk assessment; relevant certifications preferred.
The predicted salary is between 60000 - 75000 £ per year.
TPRM Security Consultant to act as a trusted advisor to senior stakeholders responsible for ensuring the security of a broad range of technical integrations between M&S and its suppliers, providing risk-based assessments and supporting third-party options to mitigate security risks related to complex TPRM engagements. Additionally, to ensure Secure-by-Design thinking is embedded into everything we do and that the risks are understood and managed.
You will be responsible for establishing and maintaining an effective relationship with assigned portfolio(s) of change from the Third-Party scope at both engineering and management levels. This is a global role that requires cross-organisational influence over all areas of the business and technology including traditional retail, online, international, delivery centres, partners etc to support our mission in the management and reduction of Cyber Risk.
What you'll do
- Own the InfoSec relationship with identified Third Party portfolio(s) of change to drive risk-aware business decisions.
- Become a trusted advisor to the technical and management teams in your assigned portfolio(s).
- Identify when your TPRM portfolio(s) require additional InfoSec support from areas such as Security Architecture, Security Design or Security Engineering and broker a successful engagement.
- Lead technical security risk assessments and provide requirements and guidance into change activities, founded in CIS and secured by design principles.
- Oversee supplier onboarding risk assessments and ongoing monitoring programs.
Who you are
- Detailed knowledge of 2 or more security domains and good understanding of others e.g Application Security, Network Security, Infrastructure Security, Cloud Security, End-User Compute Security, IoT and ICU Security.
- Demonstrable understanding and experience of risk assessment and compliance frameworks.
- 6 years in technology with at least 2 years’ experience delivering advanced level security engineering or similar role.
- Supporting qualifications in technology or security e.g Microsoft/Azure Architecture, OR CISSP, CISM, CRISK, CGEIT, CCAK, CCSK, CCSP.
What’s in it for you
- After completing your probationary period, you’ll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
- Competitive holiday entitlement with the potential to buy extra holiday days!
- Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
- A generous Defined Contribution Pension Scheme and Life Assurance.
- A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
- Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
- Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
- Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
- A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.
Don’t worry if you don’t meet every single requirement of the job description. It’s more of a guide to what’s possible within the role. If you’re passionate, ready to work hard, and think the role feels right for you, we’d love to hear from you.
TPRM Principal Security Consultant employer: Marks & Spencer Plc
At M&S, we pride ourselves on being an excellent employer, offering a dynamic work culture that fosters collaboration and innovation. As a TPRM Principal Security Consultant, you will benefit from competitive perks such as a generous discount on products, a robust pension scheme, and extensive training programmes to support your professional growth. Our commitment to employee wellbeing is reflected in our industry-leading policies and support systems, making M&S a truly rewarding place to advance your career while contributing to the security of our operations.
StudySmarter Expert Advice🤫
We think this is how you could land TPRM Principal Security Consultant
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Marks & Spencer Plc, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Marks & Spencer Plc
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Marks & Spencer Plc. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace TPRM Principal Security Consultant
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Marks & Spencer Plc insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Marks & Spencer Plc that you’re committed to staying ahead in the game.
How to prepare for a job interview at Marks & Spencer Plc
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Marks & Spencer Plc to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Marks & Spencer Plc.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
