Security Architect
The Role The experience expected from applicants, as well as additional skills and qualifications needed for this job are listed below.
Lead the development of security architecture practices across a complex organisation, working with technology, risk and business teams so that security requirements are built into projects and platforms.
Provide architecture assurance for major business and technology change
Promote secure-by-design principles across cloud, infrastructure, data, identity and operational environments
What You'll Be Doing
Set and maintain security architecture principles, standards, patterns and reference designs
Provide security architecture input to enterprise systems and transformation programmes
Shape Identity and Access Management (IAM) design, including access governance and segregation of duties
Assess cloud, infrastructure, network, data and integration designs for security risks
Review third-party and delivery-partner proposals, recommending proportionate controls and mitigations
Translate privacy, regulatory and compliance obligations into practical technical requirements
Document architecture decisions, risk acceptances, exceptions and governance outcomes
Support security design across operational technology, business integrations, acquisitions and emerging technologies
What We're Looking For
Experience developing and applying security architecture standards, principles and design patterns
Strong understanding of IAM, access governance and segregation of duties
Experience assessing or designing secure cloud, infrastructure, network, integration and data solutions
Working knowledge of relevant security and privacy frameworks, such as UK GDPR, ISO 27001/27002, CIS Controls and Cyber Essentials
Confidence providing technical assurance and constructively challenging third-party designs
Strong communication and stakeholder-management skills across technical and non-technical teams
CISSP or a comparable professional security qualification
Nice to Have
Experience with SAP, ERP or other enterprise business platforms
Involvement in complex technology change or transformation programmes
Exposure to operational technology or industrial environments
Awareness of AI security, risk and governance
Additional qualifications such as SABSA, TOGAF, CCSP, CCSK, CISM or CRISC
Familiarity with standards such as ISO 22301, ISO 42001, NIST CSF or IEC 62443
Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy. xehkeey
To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.
Lead the development of security architecture practices across a complex organisation, working with technology, risk and business teams so that security requirements are built into projects and platforms.
Provide architecture assurance for major business and technology change
Promote secure-by-design principles across cloud, infrastructure, data, identity and operational environments
What You'll Be Doing
Set and maintain security architecture principles, standards, patterns and reference designs
Provide security architecture input to enterprise systems and transformation programmes
Shape Identity and Access Management (IAM) design, including access governance and segregation of duties
Assess cloud, infrastructure, network, data and integration designs for security risks
Review third-party and delivery-partner proposals, recommending proportionate controls and mitigations
Translate privacy, regulatory and compliance obligations into practical technical requirements
Document architecture decisions, risk acceptances, exceptions and governance outcomes
Support security design across operational technology, business integrations, acquisitions and emerging technologies
What We're Looking For
Experience developing and applying security architecture standards, principles and design patterns
Strong understanding of IAM, access governance and segregation of duties
Experience assessing or designing secure cloud, infrastructure, network, integration and data solutions
Working knowledge of relevant security and privacy frameworks, such as UK GDPR, ISO 27001/27002, CIS Controls and Cyber Essentials
Confidence providing technical assurance and constructively challenging third-party designs
Strong communication and stakeholder-management skills across technical and non-technical teams
CISSP or a comparable professional security qualification
Nice to Have
Experience with SAP, ERP or other enterprise business platforms
Involvement in complex technology change or transformation programmes
Exposure to operational technology or industrial environments
Awareness of AI security, risk and governance
Additional qualifications such as SABSA, TOGAF, CCSP, CCSK, CISM or CRISC
Familiarity with standards such as ISO 22301, ISO 42001, NIST CSF or IEC 62443
Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy. xehkeey
To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.