Principal Security Consultant

The Principal Security Consultant is a hands-on senior security specialist supporting the secure design and delivery of a programme to transform and migrate the core business SAP platform and its wider integration across the business. The role provides expert security assurance, architectural design review, and technical guidance to the transformation programme to effectively deliver a journey from blended SAP ECC to cloud-native SAP S4/HANA core, and the development of robust and secure interfaces to multiple critical business applications and functions across the organisation. .

The role will be embedded within the delivery programme, the Principal Consultant will work closely with the Business Information Security Officer (BISO) for the Central domain, along with other Infosec and business stakeholders, to ensure security risks are identified early, assessed pragmatically, and managed in line with business priorities and enterprise risk appetite.

What You’ll Do

Your key accountabilities will include:

• Review and assess solution designs and architectures for the SAP transformation programme ensuring alignment to Infosec NFRs and security/architectural patterns
• Identify security risks across identity, APIs, cloud services, data flows, third-party integrations, and proposed data migrations or interim connections to facilitate the transformation
• Provide clear, proportionate security recommendations aligned to enterprise standards/best practice
• Advise on embedding security controls into all aspects of the SAP transformation/migration plan
• Support secure engineering and operational practices across design, build, deploy, and operate phases

Your key skills will include:

• Experience in security consulting, product security, or application security
• Strong background in SAP on-prem, hybrid and cloud, as well as general online and digital platforms (web, mobile, APIs, e-commerce) and their integrations.
• Proven knowledge and experience to review, asses and challenge technical designs and architectures and associated architectural governance practices
• Strong understanding of enterprise integration challenges, methods and tooling to ensure end-to-end data protection across business functions.
• Hands-on knowledge of DevSecOps and modern CI/CD practices.

Working at M&S means being part of something bigger - helping to deliver quality, value and service to millions of customers every day. We’re inclusive, fast-moving and always evolving, with a strong sense of purpose and a focus on doing the right thing.

Here are just a few of the benefits that make working here even more rewarding:

• 20% colleague discount on all M&S products and many third-party brands for you and someone in your household, available once you’ve completed your probation
• Competitive holiday allowance with the option to buy more
• Discretionary bonus schemes linked to your performance and ours
• Strong pension and life assurance to help plan for the future
• Tailored induction and training to support your development from day one
• Exclusive perks and savings through our M&S Choices portal
• Market-leading family policies, including parental, adoption and neonatal leave
• 24/7 wellbeing support, including virtual GP access and mental health services
• One paid volunteer day a year to support a cause that matters to you

We are ambitious about the future of retail. We’re disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We’re transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don’t hesitate to let us know when completing your application. This information will be picked up by our team so we can help you perform at your best.

#hybridrole