Senior Security Architect Consultant

The Nippon Telegraph and Telephone Corporation (NTT); City Of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

NTT DATA UK & Ireland seeks a Senior Security Architect to lead the design, implementation and ongoing development of security architecture across large IT systems. You will perform threat modelling, risk assessment and ensure Secure by Design alignment with standards, while communicating complex concepts to stakeholders.

You will mentor junior staff, develop security collateral, and contribute to go-to-market propositions across our security consulting practice.

Qualifications

• Minimum of 10 years of experience in Cyber Security.
• Any 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience
• 3+ years of experience and knowledge covering AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization

Responsibilities

• Develop and own design, implementation and ongoing development of the security architecture of the client's IT systems.
• Draw upon Enterprise Security Architecture to develop and own: identify objectives, risk appetite and cyber obligations; identify vulnerabilities, perform threat modelling and risk assessment; evaluate security controls.
• Verify and evidence alignment to Secure by Design principles, corporate policy/standards and industry frameworks.
• Develop and own secure conceptual, logical and high-level designs with appropriate security controls.
• Develop and own design documentation, options papers, risk assessments and stakeholder presentations.
• Communicate complex information to senior technical and non-technical stakeholders; distil key points for resolution.
• Develop and own Security Practice skills and mentor junior team members; create collateral for offerings.
• Develop and present client proposals and go-to-market collateral with cross-team collaboration.
• Identify risks and emerging threats; quantify and lead mitigation plans.
• Collaborate with 1st-3rd lines of defense on cyber security, regulatory compliance considerations.
• Drive continuous improvement and ensure responsibilities understood across the team.

Skills

Security architecture

Threat modelling

Risk assessment

Communication

Team collaboration

Tools

AD

Cryptography

End User Computing

IAM

PKI

Server hardening

SIEM

SOAR

VMware

Job description

The team you'll be working with:

We have an opportunity for a Senior Security Architect to join our growing security consulting team in the UK.

What you'll be doing:

• The Senior Security Architect will develop and own design, implementation and ongoing development of the security architecture of the client's IT systems.
• The Senior Security Architect will draw upon Enterprise Security Architecture or Security Solutions Architecture to develop and own:
  • Identify business objectives, user needs, risk appetite and cyber security obligations
  • Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls
  • Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/standards as well as industry recognized frameworks and best practice
• Develop and own secure conceptual, logical and high-level designs by identifying appropriate security controls to be embedded in solutions that meet business requirements whilst evidencing alignment to the target risk appetite.
• Develop and own the design and be able to articulate and justify design recommendations at security architecture assurance gates
• Develop and own design documentation, options papers, risk assessments, stakeholder presentations and be able to effectively communicate these to both senior technical and non-technical stakeholders
• Should have the ability to distil complex information and concepts into key discussion points that identifies a path to resolution rather than only the identification of challenges
• Develop and own the development of the Security Practice skills and capabilities to ensure consistent high quality of service delivery and expertise. Active coaching and mentoring of junior members of the team
• Develop and own the development of collateral to support Security Consulting 'go to market's propositions and service offerings.
• Develop and own the development and presentation of compelling client proposals collaborating with teams across our business.
• Develop and own the identification of identified risks and emerging cyber security vulnerabilities and threats. The subsequent analysis to quantify and lead risk mitigation plans
• Work closely with 1st, 2nd and 3rd lines of defense on all matters relating to cyber security, information assurance, cyber risk, data privacy including regulatory and compliance considerations
• Constructively challenge established processes and controls to identify, recommend and facilitate continuous improvement, ensuring that all personnel (including senior stakeholders) understand their responsibilities in relation to security risk mitigation and remediation

What experience you'll bring:

• A track record of delivering security solutions for large-scale infrastructure, transformation or integration programmes
• Practical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines
• In-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.
• Minimum of 10 years of experience in Cyber Security
• Any 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience
• 3+ years of experience and good knowledge covering several of the following examples (this list is not exhaustive): AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)
• Strong teamwork skills and attention to detail
• Ability to work independently as needed yet always thinking as part of a team
• Self-motivation and able to take responsibility
• Is a persuasive communicator using logic to win support and change views

Please note that candidates must hold or be able to gain UK SC level Security Clearance or higher. Therefore, we can only accept applications from British Nationals who meet these criteria. Candidates with dual Nationality must flag this during the recruitment process.

Who we are:

At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.

what we’ll offer you:

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.

You can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/

We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.