Security Architecture Lead

Openwork Limited; Swindon; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Salary up to £90,000

On target bonus 15%

Pension scheme: Openwork matches 5% +

Critical illness cover

Income protection

Death in service - 4x salary

27 days holiday + bank holidays + up 到

Job summary

The Openwork Partnership is seeking a Security Architecture Lead to provide strategic security architecture leadership across cloud services, APIs, data protection and emerging technologies. You will oversee risk assessments, controls implementation, and engagement with RFI/RFP processes, shaping enterprise security across technology programs.

You'll collaborate with Assurance & Compliance, Security Engineering, and SOC, and influence architecture decisions from strategy through retirement to

Qualifications

• Strong cyber security and architecture skills across risk and change management.
• Experience in cloud and third-party services with security controls.
• Familiarity with Secure SDLC and threat modelling.

Responsibilities

• Lead security solution architecture, perform risk assessments, implement controls, review supplier proposals, and engage in RFI/RFP.
• Collaborate with Assurance & Compliance, Security Engineering and SOC on change management.
• Review security policy queries/escalations and validate changes technically.
• Own Openwork's Enterprise Security Architecture and drive its cross-portfolio adoption.
• Influence lifecycle decisions from strategy to retirement, ensuring security risks and controls are addressed.
• Assess enterprise-wide impacts of architecture decisions on users, services and third-party cloud solutions.
• Define and enforce security architecture principles and standards; drive adoption across teams and partners.

Skills

Cyber security

Solution architecture

Risk management

Cloud & third-party services

IAM / PAM

API security

Secure SDLC

Data security

Stakeholder management

Business partnering

Tools

Veracode

Fortify

WAF

Job description

As the Security Architecture Lead, you will provide strategic security architecture leadership and oversight for significant technology and business initiatives, including cloud services, payments, third-party solutions, APIs, data protection and the adoption of emerging technologies, ensuring that cyber security risks and architectural requirements are identified, assessed and appropriately addressed throughout the design and implementation lifecycle.

THE BENEFITS

• Salary - up to £90,000
• Bonus scheme - on target bonus - 15%
• Pension scheme - contribute up to 5% of your salary and Openwork will match you and put in an extra 5%
• Critical illness cover
• Income protection
• Death in service - 4x salary
• 27 days holiday + bank holidays, with the opportunity to buy up to an additional 10 days
• A range of other flexible benefits to include private medical insurance, dental insurance and much more.

KEY ACCOUNTABILITIES

• Lead security solution architecture for Openwork projects, including cyber security risk assessments, the identification and implementation of controls, review of supplier-proposed solutions and engagement with RFI and RFP exercises.
• Collaborate with other cyber security functions involved with change management, specifically Assurance & Compliance, Security Engineering, and the Security Operations Centre
• Review queries and escalations regarding security policies, compliance, and risks and validate changes to cyber security policies and standards from a technical perspective.
• Own and direct the development of Openwork's Enterprise Security Architecture, defining the target direction and ensuring its application across technology and change portfolios.
• Determine and influence technology and solution lifecycle decisions from strategy and design through implementation, operation, renewal and retirement, ensuring cyber security risks, controls and architectural implications are addressed at the appropriate stage.
• Assess and determine the enterprise-wide implications of architecture decisions affecting all users, major services, cyber risk exposure and significant third-party, cloud and cyber security solutions, ensuring outcomes are secure, usable, proportionate and consistently applied across Openwork.
• Define, mandate, maintain and uphold security architecture principles, standards and patterns with enterprise-wide impact; approve, reject, conditionally approve or elevate material architecture decisions and exceptions; and drive consistent adoption across technology teams, change initiatives and third-party solutions.

What will you need to succeed?

• Strong cyber security and solution architecture expertise, covering risk management, enterprise change, cloud and third-party services, with the judgement to assess and address complex or novel risks associated with AI and emerging technologies.
• Strong knowledge of identity and access security, including authentication and authorisation protocols, Identity and Access Management (IAM), Privileged Access Management (PAM), API gateways and API security.
• Strong working knowledge of application security, including secure application design, threat modelling methodologies such as STRIDE, Web Application Firewalls (WAF), and security testing tools including Veracode and Fortify.
• Strong understanding of secure software development practices, including the Microsoft Software Development Lifecycle and the integration of security controls throughout the development lifecycle.
• Strong knowledge of infrastructure and network security, with the ability to assess architectures, identify security risks and recommend proportionate controls.
• Strong understanding of data security, including the principles and controls required to appropriately protect sensitive and business-critical information.
• Excellent influencing and stakeholder management skills, with the ability to constructively challenge, persuade and build credibility across a complex organisation.
• Strong business partnering capability, with experience working as a trusted adviser to internal and external stakeholders and translating technical cyber security risks into clear business implications.

Why us?

At The Openwork Partnership, we're a dynamic, fast paced, and growing business with huge ambition. This is all made possible by the brilliant people who are part of The Openwork Partnership family. We're investing heavily in our colleagues, continuously striving to give them the platform to develop personally and professionally and reach their full potential. We're also very proud of our culture, as one of the Best 100 Large Companies to work for in 2022. The Openwork Partnership values, and respects individuality and we are committed to building an inclusive culture and environment which truly recognises and celebrates our colleague's individual differences and identities - just like our financial advice, for us, it's personal. We believe everyone can make a difference and your race, religion, disability, and gender will never be a barrier. At Openwork, we have a strong ethic of care for each other where you can balance a successful career with your commitments and interests outside of work. We believe that you will bring your best self to work if you are trusted to choose when, where and how you do it.