Group Cyber - Security Architect

Group Cyber Security Architect

This role is responsible for providing technical security advice and guidance, with a focus across Ardagh. The candidate will help identify digital threats through risk assessment and participate in hands-on assessments of initiatives. They will collaborate on various change projects and contribute to producing tailored security best practices for the wider business.

Roles and Responsibilities:

1. Collaborating with the business to provide security advice, requirements, and guidance during the delivery of new systems or updates to existing ones, ensuring Security by Design is considered.
2. Participating in security-focused risk assessments to ensure they fall within the acceptable risk tolerance.
3. Supporting the review of designs to ensure alignment with existing security principles, patterns, standards, and best practices.
4. Assisting in the documentation of core security patterns, standards, and guidelines, and identifying opportunities for improvement.
5. Identifying improvements in current security processes.
6. Acting as an initial point of contact for security within the region and escalating issues as needed.
7. Collaborating with the wider security architecture team to help ensure a standardized approach to security is defined and followed.
8. Supporting IT teams in ensuring correct security controls and measures are in place before implementation.

Education and Certification:

1. Bachelor's degree or equivalent experience in computer science, IT engineering, or a related field.
2. Information Security and/or Information Technology certifications such as CISSP are preferred.
3. Azure Security Certifications are preferred.

Knowledge:

1. Familiarity with common frameworks such as NIST, CIS, ISO27k, and MITRE.
2. Experience using SABSA is valuable.
3. Ability to review solution designs, recognize security concerns, and suggest appropriate mitigations.
4. Ability to work with vendors to understand security mitigations and make informed recommendations.
5. Experience in helping the business understand the security implications of design decisions.
6. Experience supporting the delivery of security requirements within the business.
7. Understanding of Threat Modelling frameworks, such as STRIDE.
8. Ability to navigate complex environments with conflicting project requirements.
9. Experience supporting the maturation of security processes and patterns within the broader security team.
10. Strong analytical and problem-solving skills, with the ability to work independently under general guidance.
11. Strong organisational skills, with a proven ability to prioritise, meet deadlines, and manage workload effectively.
12. Strong interpersonal and communication skills.
13. Fluent in spoken and written English.

Experience:

1. Prior experience in Information Security is required.
2. Prior experience in security architecture is required.
3. Experience in creating security artefacts is preferred.
4. Experience in reviewing and updating policies and standards is preferred.