Security Architect

DXC Technology; Newcastle upon Tyne; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading technology company is seeking a Security Architect to enhance their security posture and ensure compliance with frameworks such as NIST 800-53. In this role, you will evaluate security controls, implement new solutions, and lead technical projects to improve security measures. Join a dynamic environment where your expertise aids national security efforts.

Qualifications

• 5+ years of experience in security architecture.
• Strong knowledge of security frameworks like NIST 800-53.
• Experience with cloud security solutions (Azure, AWS, Google).

Responsibilities

• Oversee implementation of security solutions in compliance with NIST 800-53.
• Identify security risks and define security requirements.
• Develop security policy standards for compliance.

Skills

NIST 800-53

ISO27001

PCI DSS

COBIT

Cloud Security

Education

BSc/MSc in IT Security

Job description

Job Description:

Job Title: Security Architect
Location: NEWCASTLE
Salary: Competitive
Security Clearance: MOD SC (willing and able to obtain DV)

About DXC Technology

DXC Technology is a global IT services leader, providing cutting-edge technology solutions to modernize and secure IT infrastructure. With expertise in cybersecurity, cloud computing, and digital transformation, DXC empowers organizations to achieve operational excellence.

Role Overview

As a Security Architect, you will be responsible for enhancing the security posture of DXC's client services by ensuring full compliance with the NIST 800-53 framework. You will evaluate existing security controls, map them to NIST standards, and develop new controls and documentation to improve compliance and overall security.

Key Responsibilities

• Architect and oversee the implementation of security solutions in compliance with NIST 800-53.
• Work closely with the customer's architecture team to develop and implement security strategies.
• Identify security risks, define security requirements, and recommend remediation strategies.
• Develop and enforce security policy standards to ensure compliance with customer security requirements.
• Provide technical leadership on security projects and mentor junior team members.
• Stay up to date with DXC's portfolio of security products and services, recommending best-fit solutions.
• Support incident investigations and security control enhancements.
• Ensure security architectures align with industry frameworks such as TOGAF and SABSA.

Key Deliverables

• Gap Analysis Report: Assessing current security posture against NIST 800-53.
• Security Control Mapping: Documenting alignment of existing controls with compliance frameworks.
• Implementation Plans: Designing and deploying new security controls.
• Updated Security Documentation: Policies, procedures, and system security plans.

Essential Qualifications & Experience

• BSc/MSc in IT Security or a related field, or relevant industry experience.
• 5+ years of experience in security architecture, with at least 2 years in a similar role.
• Strong knowledge of NIST 800-53, ISO27001, PCI DSS, and COBIT.
• Experience with security frameworks (SABSA, TOGAF).
• Understanding of threat and risk analysis methodologies.
• Experience in cloud security (Azure, AWS, Google).
• Ability to work in high-security HMG and MOD environments.

Desirable Certifications

• CompTIA Security+, CISSP, CISM, CCSP, TOGAF, SABSA SCF.
• CESG Certified Cyber Professional (CCP) in Security Architecture or Risk Management.
• ISO27001 Lead Auditor.

Why Join DXC Technology?

At DXC, you will work on high-profile security projects, collaborating with some of the industry's top professionals. We provide a dynamic, high-security environment where your expertise will directly contribute to national security and business resilience.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.