Cyber Assurance & Architecture Manager

Arbuthnot Latham; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Holiday allowance (buy/sell/rollover)

Pension

4x Life Assurance

Discretionary Bonus

Flexible benefits

Job summary

Arbuthnot Latham is seeking a senior Cyber Security Architect to ensure secure design, implementation and operation of technology solutions. You will govern IAM, PAM, cloud security and security baselines, lead security reviews and provide independent assurance on projects and changes.

This role requires experience in regulated environments, threat modelling and SSDLC, and interaction with IT, architecture teams and suppliers.

Qualifications

• Experience in Cyber Security Architecture, Security Engineering or Security Assurance.
• Experience conducting security architecture reviews and risk assessments.
• Experience within regulated environments.
• Experience with cloud security, identity services and security controls.
• Knowledge of ISO27001, NIST CSF, Cyber Essentials and security governance frameworks.
• Experience implementing secure-by-design and SSDLC practices.
• Experience with cloud security architecture within Azure and SaaS environments.
• Experience performing threat modelling and security design reviews.
• Experience supporting audit and regulatory assurance activities.
• Experience assessing technology risks in financial services environments.

Responsibilities

• Define and maintain the Bank's cyber security architecture principles, technical standards and security baselines.
• Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards.
• Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change.
• Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments.
• Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed.
• Provide cyber security expertise and advice to technology teams, architecture forums, suppliers and business stakeholders.

Skills

Cyber security architecture

Security assurance

Risk assessments

Cloud security

SSDLC

Threat modelling

ISO27001

NIST CSF

Azure security

Audit support

Education

CISSP

CCSP

TOGAF

Azure Security Engineer

ISO27001 Lead Implementer/Auditor

Tools

Azure

Job description

Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job Purpose

To provide independent cyber security assurance that technology solutions are designed, implemented and operated securely. The role is responsible for cyber security architecture, secure-by-design governance, technical security standards, identity and access management governance, security assurance activities and cyber risk assessments, ensuring technology change aligns with the Bank's risk appetite, regulatory obligations and security requirements.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities:

• Define and maintain the Bank's cyber security architecture principles, technical standards and security baselines.
• Provide governance and assurance over Identity & Access Management (IAM), Privileged Access Management (PAM), cloud security and security configuration standards.
• Lead security architecture reviews and provide independent assurance over technology solutions, projects and material technology change.
• Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments.
• Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed.
• Provide cyber security expertise and advice to technology teams, architecture forums, suppliers and business stakeholders.

Key Interfaces:

• Head of Cyber
• Cyber Governance & Compliance Manager
• Cyber Operations & Third-Party Security Manager
• Cyber Operations Analyst
• IT Infrastructure & Operations
• Digital Workplace
• Application Development and Change Teams
• Architecture and Design Authorities
• Third-party suppliers and technology partners
• Internal Audit and External Auditors
• Project Managers and Business Change Teams

Person Specification

Knowledge/ Experience/Skills:

• Experience in Cyber Security Architecture, Security Engineering or Security Assurance.
• Experience conducting security architecture reviews and risk assessments.
• Experience within regulated environments.
• Experience with cloud security, identity services and security controls.
• Knowledge of ISO27001, NIST CSF, Cyber Essentials and security governance frameworks.
• Experience implementing secure-by-design and SSDLC practices.
• Experience with cloud security architecture within Azure and SaaS environments.
• Experience performing threat modelling and security design reviews.
• Experience supporting audit and regulatory assurance activities.
• Experience assessing technology risks in financial services environments.

Qualifications:

Minimum of one below is required:

• CISSP
• CCSP
• TOGAF
• Azure Security Engineer
• ISO27001 Lead Implementer or Lead Auditor
• Problem Solving and Judgment
• Customer Focus
• Planning and Reviewing
• Performance Focus
• Communication and Confidence

About Us

Life, Work and Benefits

At Arbuthnot Latham, we seek proactive individuals who embrace high standards and bring the energy needed to drive success. In return, you can thrive in a dynamic environment that values your innovative ideas and provides the stability and support for your personal and professional growth. Our human-scale ethos means that everyone is recognised as an individual, not just a number, creating a workplace where you truly belong and thrive.

As a service led, relationship driven bank, in-person collaboration and wellbeing are important to us and drives our inclusive culture. With this in mind we offer one day a week working from home.

• Competitive holiday allowance with the ability to buy / sell / rollover up to five days per year
• Pension via market leading provider
• 4x Life Assurance
• Discretionary Bonus
• Access to a suite of flexible benefits including Cycle to Work Scheme, Gym Scheme, Health Assessment, Season Ticket / Travel loans and Dental insurance as well as other discounts / vouchers

Data Privacy and Reasonable adjustments

We take keeping your data security seriously. For more detail on how we may keep your data please refer to our Privacy Notice

Reasonable adjustments : Please let us know of any adjustments or arrangements that you may need to help you apply to this role or that will help you during the recruitment process. If you wish to discuss any particular requirements or concerns you have because of a disability or medical condition please contact us at [e-mail]. Information you provide about any disability or medical condition will remain confidential unless it is necessary to disclose it to other members of staff or outside agencies to ensure the health and safety of yourself and others, or to implement the adjustments you require. In these circumstances we will first discuss with you how and to whom the information may be disclosed.