Marks & Spencer Plc
City of Westminster, London, UK
The Principal Security Consultant (Online) is a senior, hands on security specialist supporting the secure design and delivery of online and digital platforms. The role provides expert security assurance, design review, and DevSecOps guidance across web, mobile, API, and cloud native services hosted primarily on Microsoft Azure. The role works closely with the Business Information Security Officer (BISO) for the online domain to ensure security risks are identified early, assessed pragmatically, and managed in line with business priorities and enterprise risk appetite. What you'll do Review and assess solution designs and architectures for online and digital services Identify security risks across identity, APIs, cloud services, data flows, and third party integrations Provide clear, proportionate security recommendations aligned to enterprise standards Advise on embedding security controls into CI/CD pipelines (e.g. SAST, SCA, secrets scanning, IaC scanning) Support...