Cyber Security Engineer

Edinburgh City Centre, Permanent, Full-time

People’s Postcode Lottery raises funds for good causes. Together with our charity partners and players, our team members help create a fairer, greener and healthier world. You could be part of this amazing mission as a Cyber Security Engineer. Join our international team at the Postcode Lottery Group in the Netherlands, Sweden, Great Britain, Germany and Norway!

The Cyber Security Engineer is responsible for designing, implementing, managing and monitoring the organisation’s security infrastructure. They will oversee the security of IT systems, manage cybersecurity risks, respond to incidents and ensure compliance with security policies, standards and regulations. The role requires a strong background in security technologies, vulnerability management and threat-mitigation strategies.

In the role of the Cyber Security Engineer, you will work closely with all Technical Security colleagues across the group and support the Group Cyber Security Lead in implementing the Group Strategy. You will promote collaboration, sharing and the agreed Group Tech ways of working:

• You build it, you run it
• Simplify Group first

Key Responsibilities:

• Develop, implement, maintain and review security policies, procedures and protocols aligning with best practices and compliance requirements.
• Assist with the integration of security systems and processes into IT infrastructure and application development.
• Collaborate with stakeholders to implement effective cybersecurity measures across networks, systems and applications.
• Perform regular risk assessments and vulnerability scans, reporting on identified security implications.
• Identify potential security threats, vulnerabilities and risks within the PPL IT environment and across the Postcode Lottery Group.
• Develop and implement mitigation strategies for identified risks and vulnerabilities.
• Ensure incident response plans are in place and coordinate responses to security breaches or attacks, providing post-event analysis.
• Oversee the continuous monitoring of networks and systems for security threats.
• Support audits, security assessments and compliance reporting processes.
• Manage and maintain security tools such as monitoring and antivirus solutions.
• Assist in troubleshooting and resolving security issues that arise within the IT infrastructure.
• Support project teams to bake in ‘security by design’ during the project lifecycle and ensure all projects comply with security standards. Liaise with external security vendors, consultants and auditors when necessary.
• Work on international security initiatives, alongside colleagues, including those led by the Group Cyber Security Manager in line with business focus and strategy.
• Work collaboratively with the members of the Security Team, ensuring they are supported where necessary and have the opportunities to learn and develop.
• Provide technical leadership, guidance & direction for cybersecurity solutions and architecture.

Qualifications:

• Experience in information security, cybersecurity or a related field.
• Experience and proficiency working in cloud security (AWS, Azure or GCP).
• Proficiency in a variety of security technologies such as SIEM, firewalls/WAF, VPNs, IDS/IPS and Endpoint Detection & Response, email security.
• Knowledge of encryption technologies, secure network design and security auditing tools.
• In-depth experience of managing security solutions for mobile operating systems in an enterprise environment.
• Knowledge of security frameworks such as ISO 27001.
• Ability to analyse and respond to complex security incidents.
• Strong attention to detail and ability to multitask.
• Proactive in staying up to date with the latest security threats and trends.
• Ability to work under pressure, particularly during security incidents.
• Ability to communicate technical information clearly to both technical and non-technical stakeholders.
• CISSP qualified (preferable but not essential depending on experience)

Benefits of working with us:

• You will receive a competitive salary, join an excellent pension scheme and benefit from private medical care. We have a strong culture of learning and development. Our Lottery Academy offers an extensive range of training programmes and courses. There are also many career opportunities in the UK and abroad. We enjoy working with one another. We regularly arrange social activities and organise our Christmas breakfast at the end of the year, a date that everyone looks forward to, where we look back proudly at what we’ve achieved together. Your wellbeing is important to us. That’s why we offer a variety of options, including an in-house gym, with an optional weekly massage, and access to mental health support services. You’re regularly involved in the work carried out by the charities thanks to the funds we raise for them. This includes volunteering, project visits, presentations in our seminar space, and an invitation to the annual Gala event attended by the organisations we support.

If you’re interested, you can apply now. If you’d like more information, we would be happy to help you. Just contact us at jobs@postcodelottery.co.uk.