<h2>Senior Cyber Security Partner</h2><h3>Location: Hybrid at Bengaluru, Karnataka, India</h3> Following our Business Code of Conduct and always acting with integrity and due diligence and have these specific risk responsibilities: * Provide product and engineering teams with direction and guidance on all security matters. There is a whole security group to back you up; so it is not as scary as it sounds. * Engage engineering leadership on security roadmap and oversee security posture of what they build. * Co-own the security roadmap; discuss; prioritise; and co-develop plans for remediation for the product areas. * Empower security champions to succeed and creating a strong feedback loop for improvements. * Represent security in all product and architecture meet-ups. Be part of critical decisions about security. * Oversee product security activities; from the early development of security requirements; architecture reviews; and threat modelling; to strengthening application security; mitigating supply-chain risks; securing secrets; pipelines; reviewing vulnerabilities; and infrastructure security. * Perform security architecture reviews of third-party services. * Identify acceptable risk levels and assist with action plan; policy; and procedural changes for risk mitigation. * Adopt a risk-based approach and guide management in identifying business risks and potential impact to Tesco. Continuously seek both tactical and strategic solutions to enhance security. * As the security expert for the product area; engage across the security group to strengthen controls across identification; protection; detection; response; and recovery. * Oversee assurance activities like security testing; purple testing; assurance; auditing. * Reduce security fatigue for engineering and provide faster feedback within existing developer workflows; not adding another tool for them to check. * Empower the teams you work with; but also challenge the status-quo. * As a senior member of the team; engage across the security group on new ideas and initiatives. * Contribute to strengthen organisation standards and policies; develop cookbooks; secure patterns; take part in security research and tool evaluations. * You are committed to continuous improvement; seizing opportunities; and inspire change for the team. * Mentor others in the team and take part in enhancing their skills and career development.