Security Engineer

Job Title - Lead Specialist, Marketing Operations - Digital Risk & Governance

Description

Help Marketing & Communications manage technology, cybersecurity, privacy and digital risk through practical governance that enables responsible innovation. Also known in the market as: Security Engineer; Product Security Engineer; Business Information Security Officer; Technology Risk & Governance Lead.

About the Role

Pearson is looking for a Lead Specialist, Marketing Operations - Digital Risk & Governance to establish and improve how Marketing & Communications manages technology, cybersecurity, privacy and digital-risk obligations. You will translate enterprise requirements into practical governance, processes, controls and guidance that teams can understand and use.

This is a hands-on governance role for someone who can work comfortably between business teams and technical or policy specialists. You will help application and business owners understand what is required, solve barriers with them and create clear visibility of risks, decisions and remediation.

You will centralise governance discipline while preserving distributed accountability. The role enables, monitors and escalates. It does not replace the accountability held by business, application, technology, policy or control owners.

What You’ll Do

• Establish and continuously improve governance for technology, cybersecurity, privacy and digital-risk obligations across Marketing & Communications.
• Translate enterprise requirements and security standards into practical processes, controls, guidance and scalable ways of working.
• Create visibility of material risks, compliance obligations, exceptions, open issues and remediation actions.
• Strengthen application and access governance, including ownership, certifications, reviews, evidence and audit readiness.
• Advise teams early when evaluating new technology and help them navigate required governance and approvals.
• Coordinate risk and compliance considerations across the technology lifecycle, from introduction and renewal through ownership change and retirement.
• Partner with Cybersecurity, Privacy, Legal, OCTO, Procurement, application owners and platform teams to clarify requirements and resolve complex issues.
• Identify recurring friction and opportunities to simplify or automate governance while strengthening accountability.

What We’re Looking For

• Deep experience in governance, operational risk, compliance, information security or a related discipline.
• Strong working knowledge of cybersecurity, privacy and technology risk in a large enterprise environment.
• Experience translating complex policies, standards and control requirements into practical operating processes.
• Understanding of application and access governance, audit readiness, evidence requirements and technology lifecycle controls.
• Pragmatic problem-solving skills and the confidence to work through constraints with business and technical stakeholders.
• Evidence of influencing accountable owners, driving follow-through and escalating material issues without taking ownership away from others.
• Strong consulting, facilitation, communication and change-leadership capability.
• Ability to synthesise complex risks, dependencies and requirements into clear priorities, decisions and actions.
• Experience in a regulated sector such as financial services, pharmaceuticals, healthcare or government is helpful.
• A broad and adaptable background across different roles or environments is also valuable.

Location & Working Pattern

London, United Kingdom. Hybrid working, with around one day per week in the London office, normally Wednesday, subject to team needs.

Why Join Pearson?

This is an opportunity to build a practical governance capability around a visible enterprise challenge. You will help Marketing & Communications reduce technology and digital risk, improve security, strengthen evidence and accountability, and adopt new capabilities more responsibly with less friction.