Enterprise Security Architect — Hybrid, SC Cleared

LGBT Jobs; Guildford; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

National Highways is seeking a Senior Technical Architect within the Enterprise Security Architecture team to embed security across our digital ecosystem, helping IT, OT and business services to be designed, delivered and operated securely.

You will provide strategic security architecture advice across programmes, drive secure-by-design practices and support risk assessments, governance and incident response.

Qualifications

• Proven experience in security architecture.
• Strong knowledge of ISO 27001, NIST, GDPR and IEC 62443.
• Designing secure Cloud and IT architectures including IAM, encryption and network segmentation.
• Advanced security risk assessment, threat modelling and vulnerability analysis.
• Secure-by-Design principles and incident response guidance.

Responsibilities

• Provide strategic security architecture advice across IT, OT and business services, identifying security gaps, risks and opportunities.
• Maintain secure architecture design and assurance, including high-level and detailed designs, risk assessments, and controls.
• Provide expert guidance across Cloud and OT environments for configuration management, patching, access management, disaster recovery and incident response.
• Drive continuous improvement of enterprise security frameworks, policies and practices with documentation and compliance.
• Support secure lifecycle management of services and systems from transition to decommissioning with ongoing compliance.

Skills

Security architecture

Cloud architecture

IAM and encryption

Regulatory frameworks

Security risk assessment

Job description

National Highways is seeking a Senior Technical Architect within the Enterprise Security Architecture team to embed security across our digital ecosystem, helping IT, OT and business services to be designed, delivered and operated securely.

You will provide strategic security architecture advice across programmes, drive secure-by-design practices and support risk assessments, governance and incident response.