Security Architect

Roke; Romsey; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading technology and engineering firm in Romsey is seeking a Security Architect to develop high-level security architecture and ensure compliance with MOD security policies. This role involves risk analysis, documentation, and collaboration with project teams to deliver effective security solutions. The ideal candidate will have extensive experience in security architectures and relevant certifications. The firm offers a competitive salary and flexible benefits., promoting an inclusive and supportive workplace.

Benefits

Health and Wellbeing benefits

Flexible working options

Community groups for shared interests

Qualifications

• Wide range of experience in Security Architectures.
• Experience with MOD projects following JSP 604 / 453 methods.
• Knowledge of NIST 800-53 and CSF Framework.

Responsibilities

• Produce High-level Security Architecture and design documents.
• Act as Security SME for project managers and leads.
• Conduct Security Risk Analysis and Management.

Skills

Security concept communication

Technical and non-technical stakeholder engagement

Understanding vulnerabilities in security technology

Education

Relevant Cyber Security Qualifications CISSP, ISSAP, CGRC

Tools

EA Sparks

Archimate®

TOGAF®

ITIL

Job description

About Roke

Roke imagines a more secure world. A world where technology protects, rather than exposes. A world where expert engineers, consultants and business support staff collaborate to protect what matters most to our clients.

We are a friendly and flexible team with a culture of ‘time, trust and freedom’. The role may give the opportunity to work on client site, from the office, in shared workspaces or from home as necessary. We pride ourselves on listening to each other’s aspirations and accommodating wherever possible.

The Opportunity

Roke are a leading technology & engineering company with clients spanning National Security, Defenceand Intelligence areas. We work alongside our customers to solve their complex and unique challenges. As a member of the Security Team working on a large Defence programme your day will be diverse, involved, as well as rewarding.

You will work with Security SME’s, Technical Project Manager and the Lead Solution Architect to establish Security first principles within the Initial Security Architecture for our Defence business unit.

Key Responsibilities

• Producing High-level Security Architecture and design documents for various projects
• Acting as the Security SME to either customer or Roke Project Managers and Technical Leads, ensuring that solutions are developed and delivered with adherence to MOD security policy.
• Coordinate Security Risk Analysis and Management activity to support design and assurance of solutions. This includes creation and maintenance of the security risk register and management of Risk Balance Cases.
• Developing Security Architectural diagrams
• Production and maintenance of security documentation including, Secure by Design Documentation, Security Management Plans, Security Operating Procedures and Security Cases.
• Supporting the team lead in the development and deployment of cyber services.
• Identifying and capturing project and programme Security Risks

Why We Want You

The role requires a wide range of experience gathered over many years. This includes but are not limited to experience of :

• Delivering cross cutting Engineering; Security Architectures.
• Delivery of security assurance services in support of Defence Digital, DE&S or Strategic Command.
• Supporting MOD projects following JSP 604 / 453 and JSP 440 methodology including Secure by Design (SbD).

Role also requires knowledge of

• Defence CIS, Land Tactical CIS, pan-Government and NATO CIS services.
• MOD Equipment currently in service and to be released into service within next 5 years.
• MOD Secure by Design.
• NIST 800-53 and CSF Framework.

Role may also benefit from, but not essential

• Knowledge and experience of EA Sparks and Archimate® certified – visual notation language standard.
• Knowledge and experience of TOGAF® certified – enterprise architecture standard.
• Knowledge and experience of ITIL – service orientated architecture approach.
• Relevant Cyber Security Qualifications CISSP, ISSAP, CGRC

Key Skills Required

• Written and verbal Communicator, able to understand and apply security concepts to a technical level including communication of security risk implications across technical and non-technical stakeholders.
• Skilled in specific security technology used by Defence with the ability to understand and articulate the impact of associated vulnerabilities on existing and future designs and systems.

Why You Should Join Us

We have a competitive salary and access to a number of additional flexible benefits, which will cover Health and Wellbeing, Savings and Protection & Life, Leisure and Entertainment.

Roke has a great community of groups with shared interests. These enable people to share ideas and be passionate about tools, technologies & techniques, which interest them.

We are committed to a policy of Equal Opportunity, Diversity and Inclusion. Our working environment is friendly, creative and support a diverse work-force and those with additional needs.

Security Information

Due to the nature of this position, we require you to be willing and eligible to achieve a minimum of SC clearance. To qualify, you should be a British Citizen and have resided in the UK for the last 5 years.