Cyber Security Architect

JR United Kingdom; West of England; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading company is looking for a Cyber Delivery Assurance Lead in London to ensure product delivery aligns with security policies and standards. The role requires working closely with multinational organizations to manage cyber risks effectively while providing expert guidance on security measures. Candidates should possess qualifications such as CISSP or ISO27001, along with strong leadership and risk assessment skills.

Qualifications

• Broad technical knowledge of cyber security controls.
• Experience in an agile delivery environment is advantageous.
• Specific cyber knowledge in areas like Cloud security and security architecture.

Responsibilities

• Ensure product delivery meets client’s risk appetite.
• Engage with Cyber Security Office for project assurance.
• Manage security controls and compliance with legislative requirements.

Skills

Threat assessment

Influencing

Leadership

Change management

Pressure management

Education

CISSP

ISO27001 Lead Implementor

SANS GIAC

Job description

Social network you want to login/join with:

I hope you’re okay! Are you ready for your next professional adventure?

We share your motivation to progress your career and achieve your ambitions – so we want to let you know about the latest Cyber Delivery Assurance Lead- London role. Check out the details for this vacancy, with a world-leading airline company, below:

Location: Waterside, London

Hours: Monday to Friday (37.5 hours a week)

Rate: £700- £725 per day through UMBRELLA (Inside IR35)

Job purpose:

• This role reports to the Head of Cyber & IT Risk, workingclosely with client Tech DeliveryTeams, the clientCyber Team and the client Cyber Security Office. Act as the client Cyber representative on product delivery and operate as part of “product” teams, providing advice on the implementation of cyber security policies and standards across all releases and on-going maintenance.

Accountabilities:

• Provide assurance to the Head of Cyber & IT Risk that product delivery and maintenance meet’s client’s risk appetite and that controls are operating effectively.
• Successfully embedding security by design with proportionate appropriate cyber controls aligned to risk.
• Senior stakeholder management (negotiation and influencing) across multinational organisations, including third party suppliers and delivery partners.
• Take full responsibility for the secure delivery of programmes, by assisting the product team by interpreting and embedding Cyber Security policies, standards, guidelines and procedures to an agreed framework against all product team deliverables.
• Engage proactively with the client Cyber Security Office (CSO) project assurance and architecture functions, ensuring consistency and best cyber practice is adhered to.
• Provide authoritative advice and guidance on the application and operation of all types of security controls including legislative or regulatory requirements.
• Advise users on risk management and reduction and promote awareness in conjunction with cyber awareness programmes.

Skills

• Ability to undertake threat and risk assessments across varied technology stacks, identifying suitable mitigating controls.
• Demonstrates clear leadership and an ability to communicate, influence and persuade across the organisation at senior levels, leading by example and aligning stakeholder groups around a common vision.
• Initiates and manages change to help secure the future direction of client.
• Prioritisation across multiple products, based on overall product team structure and delivery strategy.
• Strong ability to work under pressure in a changing environment

Qualification

• Broad technical knowledge of cyber security controls demonstrated by attainment of appropriate qualifications e.g. CISSP, ISO27001 Lead Implementor or relevant SANS GIAC or equivalent
• Knowledge of the NIST framework, PCI DSS, GDPR and NIS as well as NCSC cyber guidance.
• Experience working in an agile delivery environment would be highly advantageous.
• Specific cyber knowledge and demonstrable experience in at least one of the following areas: Cloud security, network security, digital security (multi-platform), infrastructure security, security by design, security architecture
• Experience working in a regulated environment with specific cyber requirements that require interpretation and application.

Key performance indicators

• Collaborative engagement in programme and product governance to ensure secure delivery.
• Regular, accurate updates to stakeholders on security deliverables for programmes and products.
• Identify, report and manage cyber security risks and exceptions for products throughout their lifecycle.

Start Date

ASAP

Interested in applying? Just reply with an up-to-date copy of your CV to get the ball rolling.

Or if it is not quite right for you, but you have someone in mind for the role – please let me know.