Cyber Security Architect

We are looking to recruit Cyber Security Architect to join our growing team based in London and Slough. This will be an on-going permanent basis employment for deserving candidate. The Security Architect is responsible for supporting multiple projects and programmes by defining and championing information security solutions. The role will work closely with systems and project engineers, developers, internal / external business stakeholders and project managers within various departments to assess risk and deliver pragmatic, flexible and sustainable security that includes people, process and technology.

Required Skills and Experience

• Solid exposure of taking a leading role in the establishment and implementation of security architecture, policies and procedures.
• Experience of secure development lifecycles (SDL)
• Good understanding of enterprise-scale security management process and infrastructure
• Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA
• Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle)
• Experience of transactional revenue systems, embedded systems, smartcards, mobile payment systems
• Knowledge of cryptographic services
• Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR
• Understanding of security within agile/ DevOps and waterfall project methods, product development
• Experience of application security testing tools, e.g. SonarQube
• In depth understanding of information security control tools
• Experience of quality management systems and external audit standards e.g. ISO 9001, ISAE3402

Education and Qualification:

• Degree or equivalent and/or equivalent level of experience in relevant subject
• Certification as an Information Security professional (e.g. IISP/CISA/CISM/CISSP/ ISA)
• Security and IT vendors certifications
• CREST-registered penetration tester and/or security architect

Job Type: Permanent Full-time

Location: London/Slough

Salary: Market Rates (Based on experience)

Experience

• Min 5 years or more

If you think you are a suitable candidate for this job title and hold all necessary skills, please apply by submitting your CV. Salary will be determined from experience.

• Solid exposure of taking a leading role in the establishment and implementation of security architecture, policies and procedures.
• Experience of secure development lifecycles (SDL)
• Good understanding of enterprise-scale security management process and infrastructure
• Exposure to current information security standards and regulations such as PCI-DSS, ISO 27001, SOX, UK DPA
• Exposure to enterprise IT infrastructure and tools (e.g. Microsoft, Cisco, Sun, Oracle)
• Experience of transactional revenue systems, embedded systems, smartcards, mobile payment systems
• Knowledge of cryptographic services
• Knowledge of wider security, audit, risk and compliance standards e.g. PCI-P2PE, PCI-POI-PTS, ISO 22301, ISO27005, ISO31000, NIST, GDPR
• Understanding of security within agile/ DevOps and waterfall project methods, product development
• Experience of application security testing tools, e.g. SonarQube
• In depth understanding of information security control tools
• Experience of quality management systems and external audit standards e.g. ISO 9001, ISAE3402, * Degree or equivalent and/or equivalent level of experience in relevant subject
• Certification as an Information Security professional (e.g. IISP/CISA/CISM/CISSP/ ISA)
• Security and IT vendors certifications
• CREST-registered penetration tester and/or security architect