Security Architect

Roke; Romsey; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading technology and engineering firm in Romsey is seeking a Security Architect to produce high-level security architecture and design documents. You will work closely with Security SMEs and manage security risks in a dynamic environment. Ideal candidates will have experience with MOD security policies and relevant cyber security qualifications. Join a friendly team that values flexibility and collaboration.

Benefits

Competitive salary

Health and Wellbeing benefits

Flexible benefits

Qualifications

• Experience in producing High-level Security Architecture and design documents.
• Knowledge of Security first principles.
• Experience with MOD security policy adherence.

Responsibilities

• Produce security architecture and design documents for projects.
• Act as the Security SME for projects.
• Coordinate Security Risk Analysis and Management activities.

Skills

Delivering cross cutting Engineering

Security Architectures

Delivery of security assurance services

Supporting MOD projects

Knowledge of Defence CIS

Knowledge of MOD Secure by Design

Education

Relevant Cyber Security Qualifications (CISSP, ISSAP, CGRC)

Tools

NIST 800-53

EA Sparks

TOGAF

ITIL

Job description

Social network you want to login/join with:

Roke imagines a more secure world. A world where technology protects, rather than exposes. A world where expert engineers, consultants and business support staff collaborate to protect what matters most to our clients.

We are a friendly and flexible team with a culture of ‘time, trust and freedom’. The role may give the opportunity to work on client site, from the office, in shared workspaces or from home as necessary. We pride ourselves on listening to each other’s aspirations and accommodating wherever possible.

The Opportunity

Roke are a leading technology & engineering company with clients spanning National Security, Defenceand Intelligence areas. We work alongside our customers to solve their complex and unique challenges. As a member of the Security Team working on a large Defence programme your day will be diverse, involved, as well as rewarding.

You will work with Security SME’s, Technical Project Manager and the Lead Solution Architect to establish Security first principles within the Initial Security Architecture for our Defence business unit.

Key responsibilities will also include:

• Producing High-level Security Architecture and design documents for various projects
• Acting as the Security SME to either customer or Roke Project Managers and Technical Leads, ensuring that solutions are developed and delivered with adherence to MOD security policy.
• Coordinate Security Risk Analysis and Management activity to support design and assurance of solutions. This includes creation and maintenance of the security risk register and management of Risk Balance Cases.
• Developing Security Architectural diagrams
• Production and maintenance of security documentation including, Secure by Design Documentation, Security Management Plans, Security Operating Procedures and Security Cases.
• Supporting the team lead in the development and deployment of cyber services.
• Identifying and capturing project and programme Security Risks

Why We Want You

The role requires a wide range of experience gathered over many years. This includes but are not limited to experience of:

• Delivering cross cutting Engineering; Security Architectures.
• Delivery of security assurance services in support of Defence Digital, DE&S or Strategic Command.
• Supporting MOD projects following JSP 604 / 453 and JSP 440 methodology including Secure by Design (SbD).

The role also requires knowledge of:

• Defence CIS, Land Tactical CIS, pan-Government and NATO CIS services.
• MOD Equipment currently in service and to be released into service within next 5 years.
• MOD Secure by Design.
• NIST 800-53 and CSF Framework.

The role may also benefit from but not essential:

• Knowledge and experience of EA Sparks and Archimate certified – visual notation language standard.
• Knowledge and experience of TOGAF certified – enterprise architecture standard.
• Knowledge and experience of ITIL – service orientated architecture approach.
• Relevant Cyber Security Qualifications CISSP, ISSAP, CGRC
• Written and verbal Communicator, able to understand and apply security concepts to a technical level including communication of security risk implications across technical and non-technical stakeholders.
• Skilled in specific security technology used by Defence with the ability to understand and articulate the impact of associated vulnerabilities on existing and future designs and systems.

Why You Should Join Us

We have a competitive salary and access to a number of additional flexible benefits, which will cover Health and Wellbeing, Savings and Protection & Life, Leisure and Entertainment.

Roke has a great community of groups with shared interests. These enable people to share ideas and be passionate about tools, technologies & techniques, which interest them.

We are committed to a policy of Equal Opportunity, Diversity and Inclusion. Our working environment is friendly, creative and support a diverse work-force and those with additional needs.

Security Information

Due to the nature of this position, we require you to be willing and eligible to achieve a minimum of SC clearance. To qualify, you should be a British Citizen and have resided in the UK for the last 5 years.