Must have NV1 clearance
The System Security Architect is responsible for designing and maintaining the security architecture blueprints to ensure security requirements are identified and addressed by proven controls and technology during the capability lifecycle.
The System Security Architect will ensure that the stakeholders are continuously uplifting the security life-cycle requirements for information access, security of systems and privacy of data.
The role will manage the security architecture practice and frameworks, ensuring effective processes and standards containing risk-based security capabilities are well defined and maintained through a security architecture framework.
The System Security Architect will have considerable stakeholder engagement skills and will be required to identify relevant stakeholders’ expectations and concerns to develop a clear understanding of the methodology and practices to achieve outcomes.
Skills & Knowledge
o Demonstrated experience in architecting complex Information Communication Technology (ICT) Systems.
o Demonstrated experience in identifying and applying security controls to large-scale, complex capabilities.
o Experience in Cyber security technologies (such as digital signature, public key infrastructure, virtual private networks, firewalls, intrusion detection and data encryption).
o Experience in security architecture for IAM/PAM, Cloud Technologies (Azure, AWS etc.), Vulnerability Management, Network, SOC/SIEM Platforms.
o Detailed understanding of the major security standards and frameworks and their implications at the architectural level. Major Responsibilities
o Develop, deliver and update security architecture blueprints.
o Undertake ICT security threat and risk assessment.
o Analyse and assess ICT system security documentation and configuration, including the use of vulnerability assessment tools.
o Maintain current knowledge of cyber security trends, emerging technologies and best current practices.
Essential criteria
- Demonstrated experience in architecting complex Information Communication Technology (ICT) Systems.
- Demonstrated experience in identifying and applying security controls to large scale, complex capabilities.
- Experience in Cyber security technologies (such as digital signature, public key infrastructure, virtual private networks, firewalls, intrusion detection and data encryption).
- Experience in security architecture for IAM/PAM, Cloud Technologies (Azure, AWS etc.), Vulnerability Management, Network, SOC/SIEM Platform.
- Detailed understanding of the major Security standards and frameworks and their implications at architecture level.
Desirable criteria
- Current knowledge, experience of, and relationships within the ICT technology industry.