Lead Security Architect

New Day; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading company in financial services is seeking an experienced Security Architect to enhance their cloud security across various business domains. You will collaborate with multi-disciplinary teams to design security policies and ensure compliance with industry standards. This permanent position offers the opportunity to work on cutting-edge security challenges in the cloud environment, supported by relevant industry certifications and skills in diverse security architectures.

Qualifications

• Experience as a Security Architect with end-to-end perspective.
• Solid understanding of cloud security architectures.
• Experience working with agile teams.

Responsibilities

• Collaborate on cloud-based solutions and develop security policies.
• Implement API Security and oversee security requirements.
• Work with InfoSec team to embed requirements into architecture.

Skills

Cloud Security

Security Architecture

Threat Modelling

Distributed Systems Design

Agile Methodologies

Education

Relevant certifications such as SABSA, TOGAF, CISSP, CISM

Job description

What you will deliver

• Collaborate on plans for cloud-based solutions, including but not limited to transition strategies, bundling (multiple cloud offerings) strategies, risk assessment, and roadmap planning.
• Develops and maintains enterprise-level security design/policy to be used in development, infrastructure or any other technology project.
• Develops, maintains, owns, and regularly updates security architecture artefacts and views, including technology stack, information flows, solutions and services.
• Implement and design API Security, Container Security, Azure and AWS Cloud Security.
• Work with multi-disciplined teams to develop security-related procedures and guidelines that support information security policies.
• Oversees and provides assurance that security requirements are set and implemented as part of change projects.
• Work together with InfoSec Information Security Risk and Compliance team to embed requirements, coming out of risk assessments, into the Information Security Architecture

Skills and Experience

Essential

• Working experience as a security architect, from an end-to-end perspective, across different business domains
• Solid understanding of distributed systems design, building for resilience and cloud security architectures
• Experience working with autonomous agile teams.
• A high-level understanding of security principles, control frameworks, threat modelling, and cloud security risks.

Desirable
• Understanding of the Payments industry and embedded finance.
• Background working in Service Provider or SaaS Platform.
• Knowledge of security and compliance frameworks and standards, e.g. PCI-DSS, ISO 27001, GDPR
• Experience in software engineering
• Working knowledge of Identity services, single sign-on (SSO), OAuth, OpenID Connect and SAML
• Secure Development, CI/CD, and DevSecOps
• Relevant certifications such as SABSA, TOGAF, CISSP, CISM

We work with Textio to make our job design and hiring inclusive.

Permanent