Cyber Security Architect

• Effective business acumen and an understanding of the cyber security challenges faced by client, with the ability to interact with senior stakeholders across departments
• Experience of identifying and applying security risk and familiarity with common control frameworks
• Managing, delivering and leading cyber security and cyber risk assignments, including producing documentation, reports, recommendations and quality assuring the work produced by team members
• Working as a subject matter expert in your particular field to support a team and managing a larger team in delivering engagements at scale, with the appropriate reach and influence a across the teams and communities
• Maintaining awareness of key business and industry trends and understanding how they impact responses to cyber risk
• Ability to research, articulate and pitch complex and innovative architecture and security advice, at both business and technical levels, for new or existing problems and be able to justify and communicate design decisions directly to key customer stakeholders including senior management
• Working in a particular field as subject matter expert, to support a team in delivering engagements at scale, which may require subtle security needs
• Develop vision, principles and strategy for security architects for one project or technology
• Providing our clients with trusted advice, rooted in a pragmatic and agnostic understanding of their business situation and objectives, to help them navigate complex, risk-driven Cyber decisions
• Able to understand and comprehend the impact of decisions, balancing requirements and deciding between approaches
• Investigating major breaches of security and recommending appropriate control improvements
• Contributing to development of information security policy, standards, procedures and guidelines
• Be the point of escalation for architects in lower grade roles, with the ability to lead the technical design of systems and services

Benefits

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment
• Development access to LinkedIn Learning, a management development programme and training
• Wellness 24/7 Confidential employee assistance programme
• Social - Breakfast Tuesdays, Pizza Thursday monthly, weekly social in the office and commitment to charitable causes
• Time off 25 days a year
• Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
• Discretionary Company Bonus based on company and individual performance
• Life Assurance of 4 times base salary
• Private Medical Insurance which is non-contributory (spouse and dependants included)
• Worldwide Travel Insurance which is non-contributory (spouse and dependants included)
• Benefits Platform offering various retail and leisure discounts

• Minimum 3-5 years of experience in Information Security related positions
• Ability to apply standards, practices, codes and assessment of certification programmes relevant to the IT industry and the specific organisation or business domain
• Ability to use any tool or system which provides security access control (e.g Active Directory)
• Showing proficiency in the principles and application of cloud/virtualisation (including ownership responsibilities and security implications) and be able to use tools and systems to manage virtualised environments e.g Server/desktop virtualisation and SDDC (Software Defined Data Centre)
• IASME / Cyber Essentials Plus Certified
• Knowledge of identifying, developing and communicating threat modelling
• Knowledge of secure network architecture and technical design
• Pro-active approach to personal and professional development
• Experience providing expert strategy, risk and technical advice, guidance and support on cyber security, both in business-as-usual and for live and planned projects within our clients’ business
• Minimum 2-3 years of experience in security architecture
• Demonstrably experienced in working as an effective member of a multi-disciplinary team
• Must hold, or be able to hold, an HMG Security Check (SC) clearance
• Broad range of cyber and information security skills, knowledge and experience such as security threats and vulnerabilities that impact/and/or emanate from system hardware, software and other infrastructure components, and relevant strategies, controls and activities to prevent, mitigate, detect and resolve security incidents affecting system hardware, software and other infrastructure components
• Certification in AWS or Azure for Architecture and Security or similar
• Experience in writing and creating Cyber Security documents i.e. Risk Assessments, ESRM, DPIA etc and produce particular patterns and support quality assurance
• Excellent stakeholder management, presentation and communication skills
• An experienced consultant with a background in Cyber Security
• Experience in creating secure architecture in either AWS either/or Azure
• Able to gap analysis for specific domains, identify gaps in existing capabilities, service maturity. Identify missing cybersecurity and cyber-resiliency capabilities in alignment with changing business needs, threat land scape and technical requirements to increase the quality of the selected solutions also including topics such as products’ convergence over time and products decommissioning
• Knowledge of the IT/IS infrastructure (e.g databases and LANs) and the IT applications and service processes used within own organisation, including those associated with sustainability and efficiency
• Great stakeholder management
• Knowledge of evolving digital technology/applications e.g. AI/Digital twins/IoT
• Autonomy to develop and grow your skills and experience
• Good Communication skills
• A creative approach to problem solving
• Be part of exciting project work that is making a difference in society
• Flexibility to learn and grow
• Good listening and comprehension
• Am I the right fit? We’re looking for:
• Resilience
• Security Certification e.g ISC2 CISSP, ISC2 CCSP, ISACA CISM or similar
• Strong collaboration and team working
• Experience working on central government, local government and public corporations projects and deliverables
• A determined and tenacious approach to work
• Genuine passion/commitment to improving public services
• Knowledge of principles, practices, tools and techniques of IT auditing
• Strong, inspiring, and thought-provoking leadership
• A supportive and collaborative environment
• Knowledge, application, implications and technical aspects of computer-mediated tools that allow people to create, share or exchange information, ideas, and pictures/videos in virtual communities and networks
• Experience in the discipline associated with data sets so large and/or complex that traditional data processing applications are inadequate. The data files may include structured, unstructured and/or semi-structured data, such as unstructured text, audio, video, etc. Challenges include analysis, capture, curation, search, sharing, storage, transfer, manipulation, analysis, visualization and information privacy
• Methods and techniques for preparing and presenting business cases, requests for proposal (RFP) invitations to tender (ITT) and statements of requirements/work both verbally and in writing