Principal Enterprise Security Architect (Cyber Security)
Role details
Job location
Tech stack
Job description
As Principal Enterprise Security Architect you will be leading & delivering secure technology solutions aligned with enterprise security strategy, government standards, and organisational risk appetite. As Security Pillar Lead, you will oversee design, delivery, and operationalisation of complex security solutions, risk management, and implementation/monitoring of Security assurance. Reporting to the Head of Cyber Security, you will enjoy providing enterprise-wide risk consultancy, stakeholder engagement, and leadership. Main Responsibilities will include but not be limited to:
- Leading the Cyber Security architecture and design function across the clients programmes, to deliver at national scale
- Oversee design, delivery, and running of Cyber Operational capability, and develop an enterprise architecture aligned with clients guiding principles
- Lead the technical Cyber Security design of systems and services across several programmes and technologies (at an organisational / inter-organisational level)
- Research, identify, validate and adopt new security tech, architecture, and methodology
- Lead engagement with client customers (across both UK Government and the private sector) on security risk and decision-making
- Communicate current / emerging threats, whilst designing security architecture to mitigate against them
Requirements
All candidates MUST Hold one of the following:
-
Certified Information Security Systems Professional (CISSP)
-
SABSA Chartered Security Architect (SCF)
-
Certified Information Security Manager (CISM)
-
You will have referenceable, in-depth knowledge and experience in Cyber Security and IT (including business process design)
-
You will have an understanding of IT networking and virtualisation technologies
-
You will have the ability to define architecture roadmaps and associated strategies (including design analysis)
-
You will have a In-depth assessment of IT systems, cloud offerings and IT Security controls, to provide an independent view of their compliance and effectiveness with Security Policy, IT Security standards, and regulatory requirements
-
You will assess architectural designs to determine whether the relevant Security controls have been identified; in-line with business objectives and risk mitigation
-
You will have experience of cross-security domain approaches and solutions