Cyber Security Architect
Venesky-Brown's client, a public sector organisation in Glasgow, is currently looking to recruit a Cyber Security Architect on a permanent basis on a salary of £60,915 - £69,143/annum. This role will be based in Glasgow with flexible working arrangements.
Responsibilities:
- Lead the development and maintenance of cyber security architecture, principles, standards and design patterns across the organisation, ensuring alignment with business priorities, partner requirements and cyber strategy.
- Provide expert security architecture advice and assurance to projects, programmes and operational change, ensuring solutions are secure, proportionate and aligned with policy, standards and risk appetite.
- Translate business, functional and non-functional requirements into secure architectural designs and high-level solutions that support service delivery and organisational objectives.
- Review, challenge and influence proposed solutions to ensure security requirements are Embedded by design and architectural decisions are evidence-based, risk-informed and sustainable.
- Support governance and assurance processes by providing technical security input to relevant forums, including design and change approval activity.
- Evaluate new and existing technologies, including third-party solutions, to assess suitability, security compliance and alignment with strategic direction.
- Contribute to the development of cyber security strategy, roadmaps and implementation plans to support secure technology change across the organisation and partner organisations.
- Identify, assess and support the mitigation of technical and security risks, contributing to compliance with relevant regulatory, policy and assurance requirements.
- Build effective relationships with internal and external stakeholders to promote secure practice, support informed decision-making and strengthen cyber security capability across the partnership.
Essential Skills:
- Demonstrable work experience equivalent to SCQF level 9 or educated to degree level in Cyber Security.
- Hands on experience of working in a Security Architect role.
- Qualification in industry recognised enterprise architecture frameworks such as SABSA, TOGAF or equivalent.
- Experience in similar customer-facing role working closely with business customers to develop technology-based solutions that align to business strategy.
- Experience of working closely with IT Suppliers who provide 3rd party solutions.
- Experience of defining solutions and system configurations.
- Experience of development and implementation of Cyber Security Strategies.
- Experienced defining and communicating technology and architecture blueprints and implementing roadmaps to achieve successful outcomes.
- Strong working knowledge of core cyber security domains and the application of proportionate security controls.
- Ability to analyse complex technical and business scenarios and develop timely, effective and practical solutions.
- Strong influencing and stakeholder management skills, with the ability to build credibility and influence at all levels.
- Good understanding of relevant IT legislation, regulation and compliance requirements, including Data Protection, Freedom of Information and Computer Misuse.
- Ability to lead and shape security strategy and architecture in response to business priorities and the evolving cyber threat landscape.
- Knowledge of, or experience of working with, digital teams in a cloud-first environment.
- Excellent written, verbal and presentation skills, with the ability to communicate complex information clearly and build effective relationships.
- Strong interpersonal, negotiation, planning and organisational skills.
- Solutions-focused, with strong problem-solving, analytical, critical thinking and decision-making skills.
- Strong understanding of enterprise IT, including strategy, enterprise architecture, governance, operations, infrastructure and DevOps.
- Determined, assertive and politically aware.
- Must be a team player and able to work collaboratively with and through others.
- Strong customer focus.
- Highly motivated/enthusiastic and driven.
- High level of personal resilience able to remain effective in changing business circumstances.
- Ability to resolve difference between individuals and/or interested parties.
- Ability to foster a culture of trust and co-operation and team working.
- Forward looking with a holistic approach.
- Self-managing.
Desirable Skills:
- Industry leading Security Certification eg CISSP, SSCP, CompTIA Security+, CompTIA Cysa+.
- Certification in Microsoft Azure Security, Solutions Architecture or equivalent.
- Experience of using architectural tools such as Archimate Architecture.
- A good understanding of risk management including risk concepts, risk assessments and risk reporting.
- Understanding of Cloud Security industry level frameworks eg, ISO27017&18, NSCS Cloud Security Principles.
If you would like to hear more about this opportunity please get in touch.
Responsibilities:
- Lead the development and maintenance of cyber security architecture, principles, standards and design patterns across the organisation, ensuring alignment with business priorities, partner requirements and cyber strategy.
- Provide expert security architecture advice and assurance to projects, programmes and operational change, ensuring solutions are secure, proportionate and aligned with policy, standards and risk appetite.
- Translate business, functional and non-functional requirements into secure architectural designs and high-level solutions that support service delivery and organisational objectives.
- Review, challenge and influence proposed solutions to ensure security requirements are Embedded by design and architectural decisions are evidence-based, risk-informed and sustainable.
- Support governance and assurance processes by providing technical security input to relevant forums, including design and change approval activity.
- Evaluate new and existing technologies, including third-party solutions, to assess suitability, security compliance and alignment with strategic direction.
- Contribute to the development of cyber security strategy, roadmaps and implementation plans to support secure technology change across the organisation and partner organisations.
- Identify, assess and support the mitigation of technical and security risks, contributing to compliance with relevant regulatory, policy and assurance requirements.
- Build effective relationships with internal and external stakeholders to promote secure practice, support informed decision-making and strengthen cyber security capability across the partnership.
Essential Skills:
- Demonstrable work experience equivalent to SCQF level 9 or educated to degree level in Cyber Security.
- Hands on experience of working in a Security Architect role.
- Qualification in industry recognised enterprise architecture frameworks such as SABSA, TOGAF or equivalent.
- Experience in similar customer-facing role working closely with business customers to develop technology-based solutions that align to business strategy.
- Experience of working closely with IT Suppliers who provide 3rd party solutions.
- Experience of defining solutions and system configurations.
- Experience of development and implementation of Cyber Security Strategies.
- Experienced defining and communicating technology and architecture blueprints and implementing roadmaps to achieve successful outcomes.
- Strong working knowledge of core cyber security domains and the application of proportionate security controls.
- Ability to analyse complex technical and business scenarios and develop timely, effective and practical solutions.
- Strong influencing and stakeholder management skills, with the ability to build credibility and influence at all levels.
- Good understanding of relevant IT legislation, regulation and compliance requirements, including Data Protection, Freedom of Information and Computer Misuse.
- Ability to lead and shape security strategy and architecture in response to business priorities and the evolving cyber threat landscape.
- Knowledge of, or experience of working with, digital teams in a cloud-first environment.
- Excellent written, verbal and presentation skills, with the ability to communicate complex information clearly and build effective relationships.
- Strong interpersonal, negotiation, planning and organisational skills.
- Solutions-focused, with strong problem-solving, analytical, critical thinking and decision-making skills.
- Strong understanding of enterprise IT, including strategy, enterprise architecture, governance, operations, infrastructure and DevOps.
- Determined, assertive and politically aware.
- Must be a team player and able to work collaboratively with and through others.
- Strong customer focus.
- Highly motivated/enthusiastic and driven.
- High level of personal resilience able to remain effective in changing business circumstances.
- Ability to resolve difference between individuals and/or interested parties.
- Ability to foster a culture of trust and co-operation and team working.
- Forward looking with a holistic approach.
- Self-managing.
Desirable Skills:
- Industry leading Security Certification eg CISSP, SSCP, CompTIA Security+, CompTIA Cysa+.
- Certification in Microsoft Azure Security, Solutions Architecture or equivalent.
- Experience of using architectural tools such as Archimate Architecture.
- A good understanding of risk management including risk concepts, risk assessments and risk reporting.
- Understanding of Cloud Security industry level frameworks eg, ISO27017&18, NSCS Cloud Security Principles.
If you would like to hear more about this opportunity please get in touch.