This role is responsible for providing hands‑on technical security assurance across internally developed applications, AI‑enabled systems, APIs, integrations, and supporting hosting or cloud environments.

The position acts as a bridge between GRC, Digital and IT teams to ensure security risks are identified early within the Software Development Lifecycle, validated through technical review, and translated into actionable remediation plans.

The role focuses on application security, AI/LLM security, secure SDLC, API key and secrets management, technical risk assessment, and security control validation. The role is not intended to function as a full red‑team role, but may coordinate penetration testing, vulnerability assessment, or external security testing where required.

Key Responsibilities

1. Application Security and Secure SDLC

• Assess security practices across the Software Development Lifecycle.
• Participate in application des...