Security Project Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
Responsibilities:
- Lead Nasstar’s compliance with the Telecoms Security Act (TSA) and associated Ofcom regulatory requirements
- Ensure the organisation can evidence a robust and defensible security posture
- Partner with engineering, security, and operational teams to translate regulatory expectations into practical control effectiveness
- Lead delivery of TSA compliance activities
- Coordinate responses to Ofcom information requests and regulatory submissions
- Interpret TSA Code of Practice measures and translate them into business and technical actions
- Gather required information from Core Engineering, Voice, OSS, Operations, Procurement, and IT & Security teams
- Review and validate technical, architectural, and operational evidence
- Provide evidence-based challenge and ensure submissions are complete, accurate, and aligned to regulatory expectations
- Identify evidence gaps, control weaknesses, and remediation areas
- Assess compensating controls where full compliance is not achieved
- Apply risk scoring in line with Nasstar’s risk management framework
- Focus on risks impacting Security Critical Functions and supporting network oversight capabilities
- Align TSA requirements with NCSC CAF, ISO 27001, and HSCN frameworks
- Support governance reporting and risk committee discussions
- Contribute to internal assurance and control frameworks
- Review and advise on supplier contracts and security obligations
- Support Legal & Procurement with security requirements and risk considerations
- Contribute to third-party risk and assurance activities
Requirements:
- Experience in telecoms or network service provider environments, cyber security, network security, infrastructure security, technology risk, compliance, or regulatory assurance
- Experience supporting or responding to regulatory frameworks such as TSA, NCSC CAF, ISO 27001, or NIS
- Experience operating in a second-line GRC or assurance capacity rather than hands-on engineering or operational delivery
- Ability to engage with asset owners and technical SMEs
- Ability to extract relevant control evidence
- Ability to validate that controls are appropriately designed and operating
- Ability to challenge insufficient control coverage or assurance
- At least one relevant certification is ideally preferred, including CISSP, CISM, CRISC, CCNP Security, CCSP, CCNA Security, CompTIA Security+, CompTIA Network+, or equivalent recognised certification
- Ability to interpret technical concepts and align them with security or regulatory requirements
- Ability to assess control effectiveness and identify gaps or weaknesses
- Experience within a regulated telecoms environment, particularly under the Telecoms Security Act or Ofcom regulatory engagement
Benefits:
- 25 days’ holiday (excluding bank holidays) + Your Birthday Off
- Flexible working
- Virtual working / remote work
- Best-of-breed software and hardware for all staff
- 4x annual salary life assurance
- Health cash plan
- Retail discounts and other perks from major brands
- Competitive salary
- Supportive teams
- Opportunity to progress in your career
Similar Jobs
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, network, and wireless systems. Interface Systems delivers managed security, network, UCaaS, and business intelligence solutions.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, access control, and network systems. Interface Systems delivers managed security, connectivity, and IT solutions to distributed enterprises.
Business Information Security Lead
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.
Senior Security Engineer
Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Senior Consultant – Cloud Red Team, Blue Team
Sr. Consultant performing cloud-focused adversary emulation techniques. Collaborating with clients to validate security defenses and improve cloud security measures.