Security Capability Architect — Frameworks & GRC Specialist

Xcede Recruitment Solutions; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Xcede Recruitment Solutions is seeking a Cyber Security Capability Consultant for a major global financial services client. The role is onsite at Liverpool Street, London initially, moving to hybrid, with a six-month contract and ASAP start.

You will assess the current security landscape, catalogue technologies, and map capabilities against recognized frameworks. You'll engage with security, technology and business stakeholders, identify security tools, build a central inventory, and produce

Qualifications

• Experience mapping technologies, controls or processes to security frameworks.
• Strong understanding of cybersecurity principles, controls and architecture.

Responsibilities

• Identify and catalogue security tools and technologies across the organisation.
• Investigate IT platforms that provide security outcomes, even where not primary.
• Build and maintain a central inventory of security capabilities and supporting technologies.
• Map security technologies, capabilities and controls against frameworks including NIST CSF, NIST 800-53, CIS Controls and CRI Profile.
• Establish a baseline security capability model.
• Benchmark current security capabilities against recognised industry frameworks and standards.
• Run workshops, interviews and discovery sessions with security and technology stakeholders.
• Produce clear analysis, executive reporting and progress updates.

Skills

Cybersecurity

Security Controls Mapping

Security Capability Assessment

Cybersecurity Frameworks

NIST/CIS/CRI

Security Maturity Assessments

Security Architecture

GRC / Cyber Risk

Stakeholder Engagement

Workshop Facilitation

Analytical Skills

Written & Verbal Communication

Job description

Xcede Recruitment Solutions is seeking a Cyber Security Capability Consultant for a major global financial services client. The role is onsite at Liverpool Street, London initially, moving to hybrid, with a six-month contract and ASAP start.

You will assess the current security landscape, catalogue technologies, and map capabilities against recognized frameworks. You'll engage with security, technology and business stakeholders, identify security tools, build a central inventory, and produce