Data Privacy and Security Professional

About The Role

Provide independent assurance that BT's critical applications are properly governed, resilient, and compliant, helping prevent security, regulatory, and operational risks before they become incidents. Drive accountability across application owners, technical teams, and suppliers to ensure governance, identity, and resilience requirements are met, while enabling leaders to have confidence in BT's control environment and overall operational resilience.

Key Responsibilities

• Drive application security compliance programs to completion (IDAM) particularly Entra ID, CIA, and identity-access management onboarding activities, by engaging application owners, vendors, and technical teams, chasing progress, and removing blockers.
• Provide risk and compliance assurance over BT's most critical applications, ensuring resilience questionnaires, control assessments, and governance requirements are completed accurately and on time.
• Hold application owners accountable for regulatory and governance actions, issuing targeted actions, monitoring progress, escalating delays, and ensuring commitments are delivered.
• Identify and help remove obsolete or unmanaged technology assets, including applications that are no longer in use and should be decommissioned or removed from governance inventories.
• Bridge between security, risk, application owners, vendors, and technical delivery teams, coordinating conversations and ensuring everyone understands what actions are required.
• Support governance and access-control improvements across BT platforms and services, including SharePoint access governance and permission reviews.
• Provide senior management with assurance, status reporting, and issue escalation, translating operational activity into actionable updates for leaders and intervening where progress is insufficient.
• Drive application resilience assurance for BT's most critical applications through CGP/MyAssets governance activities, ensuring resilience questionnaires are completed, data is accurate, overdue actions are resolved, and critical application risks are visible to senior leadership.

Requirements & Tech Stack

• Proven experience delivering application security and compliance programs.
• Knowledge of identity and access management, including Entra ID onboarding.
• Experience managing risk assessments, resilience reviews, and governance actions.
• Ability to coordinate application owners, vendors, security, and technical teams.
• Strong ownership in tracking actions, challenging delays, and driving completion.
• Experience producing clear status reports and risk updates for senior leadership.
• Exposure to application lifecycle governance and decommissioning obsolete assets.