Cyber Solutions Lead

Clyde & Co Global Services Limited; Glasgow; On-site; GBP 90,000 - 130,000; Full time

Job summary

Clyde & Co Global Services Limited is seeking a Cyber Solutions Lead in Glasgow to define, maintain and implement security architecture across business and technical domains. You will drive a Security by Design approach for new programmes, projects and major changes to deliver secure, compliant solutions.

The role requires strong expertise in security architecture and engineering, with a focus on cloud security, policies, and governance.

Qualifications

• 5+ years of technical security architecture and engineering experience in a global security function.
• 2+ years of experience in leading a global security architecture and engineering function.
• Expert-level knowledge of security principles and technologies.
• Experience designing and implementing security solutions with a specific focus on cloud solutions.
• A sound understanding of emerging threats and industry trends.
• Strong interpersonal, communication and influencing skills with the ability to operate and communicate effectively at all levels.
• Experience with cloud networking architecture and operations as well as security automation and orchestration.
• A sound understanding of ISO/IEC 27001/2, NIST and OWASP Top 10.
• Ideally knowledge of the legal industry but not essential.
• Strong demonstrable knowledge of the Microsoft E5/E7 security stack and associated technologies.

Responsibilities

• Security Architecture and Consulting - Provide security SME input to new initiatives and define secure development principles.
• Implement and manage a Secure Software Development Lifecycle programme aligned to project methodology.
• Ensure relevant security policies are in place and applied.
• Participate in Architecture Review Board (ARB) and Technical Design Authority (TDA) for security guidance.
• Lead identification of technical risks and threats to network security provisions.
• Define, maintain and implement security controls and technologies.
• Input to global security strategy and investment plan creation and maintenance.
• Lead cloud security architecture and supporting controls integration in design of cloud tech and services.
• Identify opportunities to standardise and simplify security stack using native cloud capabilities.
• Lead security architecture transformation projects to enhance current measures.
• Collaborate with cyber security and wider IT teams on initiatives.
• Review and improve hardening standards for endpoints, servers, and firewalls.
• Enhance endpoint protection and monitoring solutions.
• Review data ingress/egress points and strengthen data protection controls.
• Define data leakage protection measures and mitigations.
• Collaborate with Cyber Defence in evaluating new technologies and products.
• Lead governance of AI security including risk assessment and controls.
• Lead resourcing, hiring, training and retention for the security architecture team.

Skills

Security architecture

Security engineering

Cloud security

Security governance

Threat identification

ISO/IEC 27001/NIST

OWASP Top 10

Microsoft E5/E7 security stack

Leadership

Communication

Job description

Department: Information Security Location: Glasgow Contract Type: Permanent Role: Cyber Solutions Lead

Key Responsibilities

As the Cyber Solutions Lead, this role will be accountable for the definition, maintenance and implementation of the security architecture in support of the business and technical architecture. They are also accountable for ensuring that a Security by Design approach is taken with new programmes, projects and major change initiatives to deliver security assured and compliant solutions. The successful individual will be able to identify emerging technical risks and associated remediation responses to anticipate and address avoidable security events and incidents. This will include network security, application security, cloud security and endpoint security.

Primary responsibilities include:

• Security Architecture and Consulting - Providing security subject matter expertise and consulting to all new initiatives to ensure positive security outcomes are delivered, including the early definition of security controls required, definition and implementation of clear secure development design principles and developing a Security Testing & Assurance capability.
• Implementation and management of a stringent Secure Software Development Lifecycle programme, aligned to the Clyde & Co project methodology, to ensure the effective security governance of Clyde & Co's application portfolio.
• Ensure that relevant security policies are in place, reviewed and applied effectively.
• Participate in the Architecture Review Board (ARB) and Technical Design Authority (TDA) to provide guidance on the architecture and design of security solutions for applications or systems.
• Lead the continuous identification of technical risks and threats to our network security provisions.
• Accountable for the definition, maintenance and implementation of security controls and technologies.
• Security Architecture and Engineering - Providing input to the global security strategy & investment plan creation and maintenance.
• Lead the definition, review and implementation of the cloud security architecture and supporting controls to ensure that security is built into the design of our cloud technology and services.
• Identify opportunities to standardise and simplify our security technology stack by leveraging native cloud capabilities.
• Lead key security architecture and engineering transformation projects designed to enhance our current measures and protect Clyde & Co against our key threats.
• Build strong relationships with the rest of the cyber security and wider IT teams to collaborate on initiatives and raise awareness of the technical threat landscape.
• Review and improve hardening security standards for endpoints, server, firewalls etc, to aligned with good practice.
• Enhance and oversee implementation of endpoint protection and monitoring solutions.
• Review data egress and ingress points and identify opportunities enhance current controls and technologies to effectively protect and monitor data leaving the organisation.
• Ensure that data leakage protection measures are defined, designed and implemented to minimise internal data leakage incidents.
• Collaborate with the Cyber Defence team in the assessment of new technologies and products for IT and business solutions.
• Lead the security governance of AI technologies including identifying risks to the firm and working with stakeholders to develop pragmatic and appropriate security controls.
• Leading the team Identify resourcing requirements and hire, train and retain our security architecture and engineering team.

Experience and skills required

• 5+ years of technical security architecture and engineering experience in a global security function.
• 2+ years of experience in leading a global security architecture and engineering function.
• Expert-level knowledge of security principles and technologies.
• Experience designing and implementing security solutions with a specific focus on cloud solutions.
• A sound understanding of emerging threats and industry trends.
• Strong interpersonal, communication and influencing skills with the ability to operate and communicate effectively at all levels.
• Experience with cloud networking architecture and operations as well as security automation and orchestration.
• A sound understanding of ISO/IEC 27001/2, NIST and OWASP Top 10.
• Ideally knowledge of the legal industry but not essential.
• Strong demonstrable knowledge of the Microsoft E5/E7 security stack and associated technologies.

The Firm

When you work at Clyde & Co, you join a team of 500 partners, 2,400 lawyers, 3,200 legal professionals and 5,500 people in nearly 70 offices and associated offices worldwide. Our values are the principles that guide the decisions we make, unite us in our endeavours and strengthen our delivery, for both our clients and our firm. We work as one, excel with clients, celebrate difference and act boldly. We are committed to operating in a responsible way by progressing towards a diverse and inclusive workforce that reflects the communities and clients it serves. We are devoted to providing an environment in which everyone can realise their potential, using its legal and professional skills to support its communities. We do this through pro bono work, volunteering and charitable partnerships, and minimising the impact it has on the environment, including through our commitment to the SBTi Net-Zero standard and the setting of ambitious emissions reduction targets.

Clyde & Co is proud to be an equal opportunities employer. Our values encourage us to support fairness, celebrate diversity and prohibit all forms of discrimination in the workplace to allow everyone to excel at work. Therefore, we welcome and encourage all applications from suitably qualified individuals, regardless of background or identity.

A Note on Privacy Please take a moment to read our privacy notice. This describes what personal information Clyde & Co (we) may hold about you, what it’s used for, how it’s obtained, your rights and how to contact us as a data subject. If you are submitting a candidate as a Recruitment Agency Partner, it is an essential requirement and your responsibility to ensure that candidates applying to Clyde & Co are aware of this privacy notice. This is the job description as constituted at present; however, Clyde & Co reserves the right to reasonably amend it in accordance with the changing needs of the business.

We are a global law firm working with businesses at the heart of global trade and commerce. But we’re so much more than that. Our collective drive, our pursuit of excellence and our ambition to do our best for our clients, and each other has fuelled our growth for over 90 years. It’s an exciting time to work with us. With challenging cases, impactful client projects, growing teams and new offices, you’ll work in a fast-paced environment with rewarding outcomes. Collectively, we strive towards our shared goal of consistently delivering exceptional outcomes and bringing the best out in each other. With over 65 offices in 26 countries, wherever you’re based, you’ll be empowered to accelerate your career doing interesting, stimulating work, achieving your potential and delivering exceptional outcomes. Here, you’re in good company. Our people stay with us because we invest in strong relationships and value shared success.