Senior Security Architecture Lead – Cloud & OT

National Highways; West of England; Hybride; GBP 70 000 - 95 000; Plein temps

Résumé du poste

National Highways is seeking a Senior Technical Architect to strengthen the Enterprise Security Architecture team within Digital Services. You will embed security across IT, OT and business services, shaping secure designs from the outset and guiding architecture across programmes and operations.

You will translate security strategy into practical solutions, apply ISO 27001, NIST, GDPR and IEC 62443, and lead threat modelling, risk assessments and incident guidance, while promoting

Qualifications

• Proven experience translating security strategy into architectural designs.
• Strong knowledge of ISO 27001, NIST, GDPR, IEC 62443 and applying across IT/OT.
• Designing and evaluating secure Cloud/IT architectures including IAM, encryption and network segmentation.
• Advanced experience in security risk assessment, threat modelling and vulnerability analysis.
• Apply Secure-by-Design principles and advise on compliance and incidents.

Responsabilités

• Provide strategic security architecture advice across IT, OT and business services, identifying gaps and influencing roadmaps.
• Contribute to secure architecture design and assurance, including risk assessments and applying security controls.
• Provide expert guidance across Cloud and OT environments, supporting configuration management, patching and access management.
• Drive continuous improvement of enterprise security frameworks, policies and practices with proper documentation.
• Support secure lifecycle management of services, ensuring security requirements and auditability throughout.

Connaissances

Security architecture

Risk assessment

Threat modelling

Regulatory frameworks

Cloud security

Identity & access management

Encryption

Incident response

Outils

Cloud platforms

OT security

Description du poste

National Highways is seeking a Senior Technical Architect to strengthen the Enterprise Security Architecture team within Digital Services. You will embed security across IT, OT and business services, shaping secure designs from the outset and guiding architecture across programmes and operations.

You will translate security strategy into practical solutions, apply ISO 27001, NIST, GDPR and IEC 62443, and lead threat modelling, risk assessments and incident guidance, while promoting