Security Architect & GRC Lead

Westcoast Limited; Nottingham; On-site; GBP 35,000 - 58,000; Full time

Benefits offered by this job

Growth opportunities

Generous benefits package

Wellbeing support

Community & connection

Job summary

Westcoast Limited is seeking an Information Security professional to own governance, risk and compliance across external stakeholders, with a focus on security controls and assurance. The role covers architecture, identity management, cloud security and governance, supported by a security operations and engineering team to deliver cyber resilience and business value.

You will engage with customers, suppliers, auditors, and other groups to demonstrate control effectiveness.

Qualifications

• Minimum of 3 years’ experience in a relevant full-time security position.
• Professional qualification such as CISSP, CISM, CCSP, CISA, ISO27001 Lead Implementor/Auditor, CEH or equivalent.
• Experience with ISO27001, NIST, CIS Controls and PCI-DSS.
• Knowledge of HMG security standards (Security Policy Framework, Cyber Essentials Plus, cloud security principles).
• Experience managing security incidents and investigations including APT threat actors.
• Knowledge of security tools such as Palo Alto, Tenable, Defender, Sentinel.
• Cloud computing experience from multiple vendors (O365, Azure, AWS, Google).

Responsibilities

• Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models.
• Implement identity best practices including single sign-on and federated services.
• Collaborate with the Technical Design Board on security architecture and patterns.
• Stewardship of information security risks with the Business Assurance team and reporting.
• Ensure Data Protection Impact Assessments risks are managed.
• Record and manage policy exceptions and risks on risk registers.

Skills

GRC

Security architecture

Identity management

Auditing

Cloud security

Education

Information Security degree

Tools

Palo Alto

Tenable

Defender

Sentinel

Azure

AWS

Job description

Westcoast Limited is seeking an Information Security professional to own governance, risk and compliance across external stakeholders, with a focus on security controls and assurance. The role covers architecture, identity management, cloud security and governance, supported by a security operations and engineering team to deliver cyber resilience and business value.

You will engage with customers, suppliers, auditors, and other groups to demonstrate control effectiveness.