Hybrid Security Architect - Lead Security Program

Biller Genie; Belfast City District; Hybride; GBP 110 000 - 140 000; Plein temps

Avantages offerts par ce poste

Health insurance

Pension plan

25 days holiday

Bank holidays 10

Career development

Collaborative culture

Résumé du poste

Biller Genie in Belfast, Northern Ireland, is seeking its first dedicated Security Architect to own information security across the company. You will consolidate governance, policy, and controls, partner with IT and Engineering, and raise security maturity across production, corporate, endpoints and product development.

This hands‑on leadership role will involve writing policy, designing controls, tuning detection tooling, and collaborating with engineers to review architecture and improve

Qualifications

• 7+ years in information security, including 3+ years in a security architecture or security leadership role.
• Proven experience building a security program or governance framework from an early‑maturity starting point.
• Strong working knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Controls, and SOC 2.
• Hands‑on experience securing Microsoft Azure and Microsoft 365 environments.
• Experience with endpoint detection and response (Microsoft Defender preferred), SIEM, and identity platforms (e.g. JumpCloud, Entra ID).
• Experience writing and running incident response, BC/DR, and tabletop exercise programs.
• Familiarity with secure SDLC practices and application security tooling.
• Excellent written and verbal communication, with the ability to explain risk clearly to executives and engineers alike

Responsabilités

• Establish and own the Information Security governance framework, including policies, standards, and procedures, and secure executive approval for them.
• Develop and maintain a leadership‑approved Information Security risk management strategy and risk register.
• Implement security incident management procedures covering reporting, classification, response, record‑keeping, and post‑incident review.
• Deliver regular reporting to senior leadership on security posture, incidents, risks, and program progress.
• Own Business Continuity and Disaster Recovery planning and run regular exercises to validate them.
• Define regulatory, contractual, and breach‑notification obligations, and keep security controls aligned with compliance frameworks (e.g. PCI DSS, SOC 2) and cyber insurance requirements.
• Own the Information Security budget and make resourcing and tooling recommendations.
• Define and maintain security architecture standards for cloud production environments, in partnership with Engineering.
• Implement Cloud Security Posture Management practices and policy.
• Establish vulnerability and patch management procedures, including software supply‑chain and dependency management, with defined remediation SLAs.
• Design production monitoring, logging, and threat detection capabilities.
• Develop production incident response, compromise recovery, and ransomware response plans, and run regular tabletop exercises against them.
• Define production backup, recovery, and resilience standards, including recovery time and recovery point objectives.
• Oversee the security testing program, including vulnerability scanning, penetration testing, and its evolution against emerging threats.
• Govern production identity, access, and secrets management standards.
• Define and implement identity and access management standards, including privileged access governance and periodic access reviews.
• Establish credential and secrets governance procedures, including the full joiner‑mover‑leaver lifecycle.
• Implement data classification, handling, retention, and destruction policies across the organization.
• Define corporate backup, recovery, and compromise response procedures.
• Establish centralized security logging, monitoring, and alerting (SIEM) capabilities, with clear ownership.
• Implement corporate vulnerability management and security testing practices.
• Govern the secure use of AI tools and AI‑integrated systems across the business.
• Own the endpoint security strategy and the configuration, tuning, and effectiveness review of endpoint protection tooling.
• Define and implement device security policies, including BYOD and mobile device management.
• Strengthen device authentication and hardening standards.
• Establish lost and stolen device procedures, and regularly validate remote response capabilities.
• Establish a Secure Software Development Lifecycle (SSDLC) with Engineering, including written secure coding standards and how they are enforced.
• Embed threat modelling and security‑by‑design reviews into product planning and architecture.
• Implement automated security testing within CI/CD pipelines (SAST, DAST, dependency and secrets scanning).
• Define data protection standards for the product, including PII identification and mapping, encryption, and multi‑tenant isolation.
• Establish vulnerability disclosure procedures and assess the case for a bug bounty program.
• Define source code integrity, repository access, and tamper‑recovery standards.
• Design and run an ongoing security awareness program aligned to compliance requirements, covering phishing, social engineering, AI and deepfake threats, and related risks such as financial fraud.
• Implement role‑based security training for Engineering and privileged users.
• Establish training completion tracking and reporting, with a recurring refresh.
• Keep training content up to date as new threats emerge

Connaissances

Security architecture

Leadership

NIST CSF

ISO 27001

CIS Controls

SOC 2

Azure

Microsoft 365

EDR

SIEM

Identity platforms

Incident response

BC/DR

SSDLC

Threat modelling

Executive communication

Outils

JumpCloud

Entra ID

Microsoft Defender

CI/CD tooling

Description du poste

Biller Genie in Belfast, Northern Ireland, is seeking its first dedicated Security Architect to own information security across the company. You will consolidate governance, policy, and controls, partner with IT and Engineering, and raise security maturity across production, corporate, endpoints and product development.

This hands‑on leadership role will involve writing policy, designing controls, tuning detection tooling, and collaborating with engineers to review architecture and improve