Cyber Security Architect

Venesky-Brown's client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Architect on a permanent basis on a salary of £60,915 - £69,143/annum. This role will be based in Glasgow with flexible working arrangements., Lead the development and maintenance of cyber security architecture, principles, standards and design patterns across the organisation, ensuring alignment with business priorities, partner requirements and cyber strategy.

• Provide expert security architecture advice and assurance to projects, programmes and operational change, ensuring solutions are secure, proportionate and aligned with policy, standards and risk appetite.
• Translate business, functional and non-functional requirements into secure architectural designs and high-level solutions that support service delivery and organisational objectives.
• Review, challenge and influence proposed solutions to ensure security requirements are Embedded by design and architectural decisions are evidence-based, risk-informed and sustainable.
• Support governance and assurance processes by providing technical security input to relevant forums, including design and change approval activity.
• Evaluate new and existing technologies, including third-party solutions, to assess suitability, security compliance and alignment with strategic direction.
• Contribute to the development of cyber security strategy, roadmaps and implementation plans to support secure technology change across the organisation and partner organisations.
• Identify, assess and support the mitigation of technical and security risks, contributing to compliance with relevant regulatory, policy and assurance requirements.
• Build effective relationships with internal and external stakeholders to promote secure practice, support informed decision-making and strengthen cyber security capability across the partnership.

Demonstrable work experience equivalent to SCQF level 9 or educated to degree level in Cyber Security.

• Hands on experience of working in a Security Architect role.
• Qualification in industry recognised enterprise architecture frameworks such as SABSA, TOGAF or equivalent.
• Experience in similar customer-facing role working closely with business customers to develop technology-based solutions that align to business strategy.
• Experience of working closely with IT Suppliers who provide 3rd party solutions.
• Experience of defining solutions and system configurations.
• Experience of development and implementation of Cyber Security Strategies.
• Experienced defining and communicating technology and architecture blueprints and implementing roadmaps to achieve successful outcomes.
• Strong working knowledge of core cyber security domains and the application of proportionate security controls.
• Ability to analyse complex technical and business scenarios and develop timely, effective and practical solutions.
• Strong influencing and stakeholder management skills, with the ability to build credibility and influence at all levels.
• Good understanding of relevant IT legislation, regulation and compliance requirements, including Data Protection, Freedom of Information and Computer Misuse.
• Ability to lead and shape security strategy and architecture in response to business priorities and the evolving cyber threat landscape.
• Knowledge of, or experience of working with, digital teams in a cloud-first environment.
• Excellent written, verbal and presentation skills, with the ability to communicate complex information clearly and build effective relationships.
• Strong interpersonal, negotiation, planning and organisational skills.
• Solutions-focused, with strong problem-solving, analytical, critical thinking and decision-making skills.
• Strong understanding of enterprise IT, including strategy, enterprise architecture, governance, operations, infrastructure and DevOps.
• Determined, assertive and politically aware.
• Must be a team player and able to work collaboratively with and through others.
• Strong customer focus.
• Highly motivated/enthusiastic and driven.
• High level of personal resilience able to remain effective in changing business circumstances.
• Ability to resolve difference between individuals and/or interested parties.
• Ability to foster a culture of trust and co-operation and team working.
• Forward looking with a holistic approach.
• Self-managing.

Desirable Skills:

• Industry leading Security Certification eg CISSP, SSCP, CompTIA Security+, CompTIA Cysa+.
• Certification in Microsoft Azure Security, Solutions Architecture or equivalent.
• Experience of using architectural tools such as Archimate Architecture.
• A good understanding of risk management including risk concepts, risk assessments and risk reporting.
• Understanding of Cloud Security industry level frameworks eg, ISO27017&18, NSCS Cloud Security Principles.