Cyber Security Analyst (Job Ref. 33)

Vasuman Limited; United Kingdom; Remote; GBP 90,000 - 120,000; Full time

Job summary

Vasuman Limited is undertaking a major transformation programme and is expanding its IT department with opportunities for IT Cyber Security Architects. The role focuses on designing, developing and maintaining a robust cyber security architecture to support business objectives and ensure security controls are documented and compliant.

Reporting to the Program Manager, you will collaborate with the architecture team, project managers and product owners to ensure the portfolio delivers secure,

Qualifications

• Experience designing cyber security architectures aligned with business objectives.
• Ability to translate security requirements into concrete controls and architectures.
• Proven track record in risk assessment, threat modelling and secure design across complex IT environments.

Responsibilities

• Design and maintain cyber security architecture standards and reference models.
• Represent security in technical design forums and ensure alignment with business objectives.
• Review security tools and solutions and drive secure design across projects.

Skills

Security architecture

Threat modelling

Risk assessment

Communication skills

Enterprise architecture

Security governance

Stakeholder management

Education

CISSP/CISM certification

TOGAF/SABSA

Tools

SIEM

PAM

MDM

Vulnerability management

Job description

At Vasuman Limited, are working on a major transformation project to meet our customers’ needs and our IT and Change departments play a key role in achieving business objectives.

We’re in the 3rd year of a 4-year journey and as a part of this Vasuman limited is transforming our entire end to end IT systems. As part of the development and expansion of our IT department, we have new opportunities for IT Cyber Security Architect’s.

Reporting to the Program Manager, our Security Architect will design, develop and maintain a robust cyber security architecture, recommending appropriate security controls and requirements in support of business objectives; ensuring that security controls are appropriate and documented, and supporting the project delivery portfolio through ensuring that new technology is designed and delivered in line with security and compliance standards.

Skills and expertise in system environment

• Development, design, and documentation of cyber security architecture standards, artefacts, and best practice; including target architectures, principles, and non-functional requirements
• Represent Cyber Security at the Technical Design Authority forum; providing subject matter expertise working closely with the wider architecture team, project managers and product owners to ensure the project delivery portfolio aligns with business, security, and compliance objectives.
• Review and evaluate existing security tools and solutions, identifying and recommending areas for improvement, opportunities to reduce technical risk, and ensuring controls and solutions maintain best-fit to SRL’s requirements
• Conduct and document technical risk assessments and threat modelling to support the identification and design of technical controls.
  Adhering to IT governance, controls, methodologies and compliance standards and expectations
• This role may also suit candidates who hold the following job titles: Technical Delivery Specialist, IT Security Technician, IT Security Analyst, Cyber Security Project Delivery Technician, Cyber Security Analyst, IT Security Engineer, IT Security Consultant, Cyber Security Engineer
• Being an ambassador for cyber security matters – inspiring, influencing, and supporting colleagues to adopt, execute, and embed security principles.

Key skills Vasuman is looking for?

• Experience working across multiple projects and managing workload accordingly in conjunction with Project Managers.
• Security architecture experience, preferably with knowledge of Enterprise Architecture and knowledge across all architecture domains.
• Expert knowledge of IT/Information/Cyber security standards, frameworks and architectural patterns. (ISO27001, NIST, CIS, PCI DSS, etc.)
• Highly experienced in Software Supply Chain Risk Management.
• Communication and negotiation skills – Able to effectively translate and communicate security controls, concepts, and risk implications to both technical and non-technical stakeholders at all levels. Responds well to challenge and is able to adapt to stakeholder reactions to negotiate to a consensus.
• Secure systems design – Able to design and review system architectures through the application of security knowledge, patterns and principles; applying an innovative approach to overcome complex challenges.
• Broad knowledge of the security product market and toolsets (SIEM, PAM, MDM, Vulnerability Management, Antimalware, etc.)
• Security / architecture with at least one of the two below mentioned certifications e.g. CISSP/CISM, TOGAF / SABSA or similar

Additional skills

As the Cyber Security Architect, you will have worked across multiple Security disciplines;

• Network Security
• Anti-virus/spam/malware
• SIEM – Security information and event management
• IAM – Identity and access management
• VA – Vulnerability Analysis and mitigation
• Application Security experience (highly desirable)
• Cloud Security (Highly desirable)
• OWASP (Highly desirable)