Cyber Security Architect

Cyber Security Architect

Salary: £70,000 - £80,000 + benefits dependent on experience

Location: Peterborough / Hybrid Working 3 days onsite per week

Fantastic new permanent opportunity for an experienced Cyber Security Architect for this large financial services business based in Peterborough. Due to continued growth and expansion, they currently have a need to recruit several vacancies for Cyber Security Architects to join their shared services IT division in Peterborough.

Reporting into the Security Architecture Manager, the Cyber Security Architect will craft and guide to help build secure systems. The Cyber Security Architect will stay on top of emerging threats and translate complex security measures into clear instructions for both technical and non-technical teams.

What you’ll be doing

• Conduct the threat assessment of IT solution design and determine the cybersecurity risk associated with the solution.
• Design the cybersecurity controls to mitigate the cybersecurity risks.
• Review the IT & cybersecurity control changes.
• Assess the emerging risks and prepare the solution to mitigate such risks.
• Conduct the periodic audit of cybersecurity control architecture.
• Develop the cybersecurity policy to meet the business objectives.
• Develop the cyber security standards or NFRs (non-Functional requirements).
• Threat assessment of new and existing deployments using industry standards and help in adversary emulation using the MITRE ATT&CK framework.
• Provide the inputs for crisis management plan and ISMS (information security management system).
• Participate in the cyber security drills and review the Cybersecurity SOPs/Process documentation.

What we’re looking for

• Ideally, you will have a bachelor’s degree in Computer Science, IT, Information Systems Management or equivalent area and have Appropriate Certificates such as CISSP or CISM.
• A proven background within a similar Cyber Security Architect role.
• A good knowledge of Cyber Architect principles.
• A good knowledge of NIST Cyber Security Framework.
• Familiar with NCSC Cyber Security guidance.
• A good understanding of Data privacy regulations such as GDPR, PCI-DSS.
• A good understanding of IT security controls.
• A good knowledge of security tools and technologies such as Firewall, WAF, SIEM, PAM, Cryptography, and others.
• Proven experience performing security control assessments utilizing established industry frameworks such as ISO 27001, COBIT, NIST.
• Experience of developing and maintaining productive relationships through individual contacts and group meetings.
• An excellent knowledge of adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK Framework.
• Ability to work with key stakeholders, mentor, and provide guidance on cloud security.

For more information and to apply, please send your CV to danny.palmer@sandersonplc.com.