Social network you want to login/join with:
The successful applicant will be responsible for:
- Analyze and assess cyber vulnerabilities at scale for their potential business impact, using your own skills and experience, and in consultation with business owners and other security specialists.
- Develop and maintain a comprehensive knowledge base of guidance to enable technical and less technical personnel to fix any cyber vulnerabilities they may have.
- Engage directly with stakeholders across the Public Sector to ensure they address and fix identified cyber vulnerabilities according to priority.
- Build and maintain good working relationships with stakeholders across the Public Sector to help prevent cyber vulnerabilities and support the implementation of Secure by Design principles.
- Collaborate closely with the Government Cyber Coordination Centre (GC3) and the National Cyber Security Centre (NCSC) to ensure unified and effective cyber defense strategies.
- Identify capability gaps and improve team workflows to quantify and reduce cyber risks faced by Public Sector bodies.
- Train and upskill team members to establish a lasting and effective cybersecurity capability.
- Work with service owners and customer organizations to identify gaps in monitoring capabilities and expand the scope of vulnerability and threat data provided.
Who you are
At this role level, your skills include:
- Excellent communication skills (security architect)
- Designing secure systems
- Enabling and informing risk-based decisions
- Research and innovation
- Knowledge of security technologies
- Understanding of current cybersecurity threats, vulnerabilities, and risks, including OWASP
- Ability to quantify the potential business impact of cyber attacks on UK Public Sector bodies
- Experience in specifying and implementing security controls and design patterns for infrastructure, networks, and applications, including cloud architectures
- Ability to communicate complex security concepts to diverse audiences, including senior stakeholders
- Knowledge of common security products and technologies, along with marketplace awareness
- Ability to produce actionable cybersecurity advice, keep it current, and improve it based on feedback
- Capability to train and upskill team members effectively
Required certifications include:
- Certified Cyber Professional (CCP)
- CREST Registered Technical Security Architect
- BCS Practitioner Certificate in Information Assurance Architecture
- ISC(2) Information Systems Security Architecture Professional