Senior Enterprise Security Architect: CIS Controls & Cloud

Gazelle Global Consulting Limited; Greater London; Sur place; GBP 90 000 - 130 000; Plein temps

Résumé du poste

Gazelle Global Consulting Limited is seeking a Senior Enterprise Security Architect in London. The role will drive CIS Controls implementation across an enterprise, defining security architecture and roadmaps while aligning controls to the CIS framework.

You will engage with senior stakeholders to shape policy, governance, and automation strategies. The position covers enterprise security, cloud security, vulnerability management and security automation, requiring hands-on CIS experience and the

Qualifications

• Strong senior-level experience in Cybersecurity and Security Architecture.
• Deep hands-on experience implementing CIS Critical Security Controls within large enterprise environments.
• Enterprise security architecture across infrastructure and cloud environments.
• Strong understanding of secure cloud migration and cloud-native security practices.
• Experience with Security as Code and automated security configuration.
• Scripting or Infrastructure as Code using Python, PowerShell, Terraform, Ansible or Bicep.
• Expert knowledge of CIS Benchmarks for OS, cloud platforms and network devices.
• Understanding IAM, Zero Trust, RBAC and ABAC.
• Experience communicating security risks to senior stakeholders.

Responsabilités

• Lead end-to-end design and implementation roadmap for CIS Controls v8 or latest.
• Assess current controls and map to CIS framework.
• Define secure architecture patterns across on-prem, hybrid and multi-cloud.
• Apply CIS Benchmarks across AWS, Azure and GCP.
• Develop enterprise security policies, standards and procedures aligned to CIS IGs.
• Collaborate with DevOps, Network Engineering and IT Operations to automate security configurations.
• Drive automated patching, hardening and configuration management.
• Design solutions for automated asset discovery and inventory.
• Establish and mature vulnerability management processes.
• Support identification, prioritisation and remediation of security risks.
• Communicate requirements and risks to technical and executive stakeholders.
• Define security KPIs to demonstrate control effectiveness.
• Promote an automation-first approach to enterprise security controls.

Connaissances

Cybersecurity

Security Architecture

CIS Controls

Security as Code

Scripting / IaC

IAM / Zero Trust

Executive Stakeholder Communication

Outils

Terraform

Ansible

Bicep

Powershell

Python

Description du poste

Gazelle Global Consulting Limited is seeking a Senior Enterprise Security Architect in London. The role will drive CIS Controls implementation across an enterprise, defining security architecture and roadmaps while aligning controls to the CIS framework.

You will engage with senior stakeholders to shape policy, governance, and automation strategies. The position covers enterprise security, cloud security, vulnerability management and security automation, requiring hands-on CIS experience and the