Security Architect(IFRS 9 & 17)(SC Cleared)
We have one open position of Security Architect with one of our client based in London, UK. This is a contract position. Below is the job description for your reference. Please share your application once you are interested
Role: Security Architect(IFRS 9 & 17)
Mode: Contract
Location: London, UK
Hybrid
Main Role & Responsibilities
A security architect creates and designs security for IFRS 9 & 17 systems and services, maintains security documentation and develops architecture patterns and security approaches to the new technologies.
At this role level, you will:
- undertake structured analysis of technical issues, translating this analysis into technical designs that describe a solution
- be consulted about design and provide design patterns
- identify deeper issues that need fixing
- look for opportunities to collaborate and reuse components, communicating with both technical and non-technical stakeholders
- align designs with Enterprise Architecture
Main Activities
- Documenting service assets
- Sourcing a threat assessment
- Performing threat modelling
- Performing a security risk assessment
- Agreeing security controls set for your service
- Responding to and mitigating security risks
- Assessing the effectiveness of security controls
- Implementing a vulnerability management process
- Managing observability
- Evaluating the security impact of changes
Skills
Analysis
- apply the approach to real problems and consider all relevant information
- apply appropriate rigour to ensure a full solution is designed and achieves the business outcome
Communication
- demonstrate a deep understanding of security concepts and can apply them to a technical level
- effectively translate and accurately communicate security and risk implications to technical and non-technical stakeholders
- successfully respond to challenges
- manage stakeholder expectations and be flexible, adapting to stakeholder reactions to reach consensus
Designing secure systems
- design and review system architectures through the application of patterns and principles
Enabling and informing risk-based decisions
- work with risk owners to advise and give feedback
- advise on risk impact and whether it's within risk tolerance
- describe different risk methodologies and how these are applied, as well as the proportionality of risk
Security technology
- explain the effect of vulnerabilities on current and future designs
- share information on a range of systems, but may specialise in one
Understanding security implications of transformation
- Interpret and apply an understanding of policy and process, business architecture, and legal and political implications to assist the development of technical solutions or controls