Principal Enterprise Security Architect

National Physical Laboratory (NPL); Greater London; On-site; GBP 100,000 - 180,000; Full time

Job summary

The National Physical Laboratory (NPL) seeks a Principal Enterprise Security Architect to lead cyber security architecture, assurance and operational services across our Time & Frequency programs. You will shape secure solutions and risk management for national-scale timing initiatives critical to UK digital infrastructure, backed by government investment and the National Timing Centre programme.

Reporting to the CIO's security function, you will drive engagement with government and industry

Qualifications

• In-depth knowledge and experience in Cyber Security and IT, including business process design.
• Understanding of IT networking and virtualization technologies.
• Ability to define architecture roadmaps and strategies, including design analysis.
• Assess IT systems, cloud offerings and IT Security controls for compliance and effectiveness.
• Assess architectural designs to ensure security controls meet business objectives and risk mitigation.
• Experience with cross-security domain approaches and solutions.

Responsibilities

• Lead Cyber Security architecture and design function across NPL’s PNT programmes to deliver at national scale.
• Oversee Cyber Operational capability design, delivery, and run an enterprise architecture.
• Lead technical Cyber Security design of systems and services across PNT programmes and technologies.
• Research, identify, validate and adopt new security tech, architecture, and methodology.
• Lead engagement with NPL’s customers on security risk and decision-making.
• Communicate threats whilst designing security architecture to mitigate them.

Skills

Cyber Security

IT knowledge

Architecture roadmaps

Risk management

Security assurance

Cross-security domain

Education

CISSP

SABSA Chartered Security Architect (SCF)

CISM

Additional security certifications

Job description

Our world-leading Time & Frequency department seek a Principal Enterprise Security Architect to lead cyber security architecture, assurance, and operational services.

This is an exceptional opportunity to join the global authority in precision timing at a defining moment for UK digital infrastructure.

Backed by a government investment of £180 million in the National Timing Centre (NTC) programme, we are developing a world-first resilient time distribution capability that will provide industry with a robust complement to satellite systems (such as GPS) - which are increasingly vulnerable to disruption from solar storms, jamming and spoofing.

This will underpin essential services, including

• Telecommunications,
• Online banking
• Emergency response
• Transport networks, and wider digital and data-driven operations

Together, these services form the backbone of modern society - and your leadership will help ensure they remain secure, reliable and robust even if global navigation satellite systems fail.

Key Responsibilities

This leadership role is responsible for delivering secure technology solutions aligned with enterprise security strategy, government standards, and organisational risk appetite. As Security Pillar Lead, you will oversee design, delivery, and operationalisation of complex security solutions, risk management, and implementation/monitoring of Security assurance.

• Lead the Cyber Security architecture and design function across NPL’s PNT programmes, to deliver at national scale
• Oversee design, delivery, and running of Cyber Operational capability, and develop an enterprise architecture aligned with NPL's guiding principles
• Lead the technical Cyber Security design of systems and services across several PNT programmes and technologies (at an organisational / inter-organisational level)
• Research, identify, validate and adopt new security tech, architecture, and methodology
• Lead engagement with NPL’s customers (across both UK Government and the private sector) on security risk and decision-making
• Communicate current / emerging threats, whilst designing security architecture to mitigate against them

About You

• Reporting to the Head of Cyber Security in CIO, you will enjoy providing enterprise-wide risk consultancy, stakeholder engagement, and leadership.
• To be successful in this role, you will have the following skills, experience, and qualifications:
• Referenceable, in-depth knowledge and experience in Cyber Security and IT (including business process design)
• Understanding of IT networking and virtualisation technologies
• Ability to define architecture roadmaps and associated strategies (including design analysis)
• In-depth assessment of IT systems, cloud offerings and IT Security controls, to provide an independent view of their compliance and effectiveness with Security Policy, IT Security standards, and regulatory requirements
• Assessment of architectural designs to determine whether the relevant Security controls have been identified; in-line with business objectives and risk mitigation
• Experience of cross-security domain approaches and solutions

Cyber Security Certifications:

1 of the following:

• Certified Information Security Systems Professional (CISSP)
• SABSA Chartered Security Architect (SCF)
• Certified Information Security Manager (CISM)

+2 (or more) industry-recognised Security certifications or qualifications

We actively recruit citizens of all backgrounds, but the nature of our work in specific departments means that nationality, residency and security requirements can be more tightly defined than others. You will be asked about this throughout the recruitment process. To work at NPL, you will need to obtain BPSS security clearance.

However, to work in this role in the Time & Frequency department, you will need to have an SC clearance with no restrictions, or you must have the ability to obtain an SC clearance.

About Us

The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK.

NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria.

Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged.

All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme.

At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we hold memberships and accreditations to ensure we’re creating an environment where all our colleagues feel supported and welcome, please see our Diversity & Inclusion page.

We are committed to the health and well-being of our employees. Flexible working and social activities are embedded in our culture to create a positive work-life balance, along with a broad range of benefits. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success.