Security Architect

Telefonica Tech

With the technology decisions you make today - Build secure digital resilience. Layer by layer.

View all jobs at Telefonica Tech

Telefónica Tech (part of the Telefónica Group) is a leading NextGen Tech solutions provider with a highly diversified team of over 6,000 exceptionally skilled employees and +60 nationalities.

We serve more than 5.5m customers every day in over 175 countries, with a global ecosystem of market-leading partners. Global strategic hubs: Spain, Brazil, the UK, Germany.

The Telefónica Tech UK&I hub has an end-to-end portfolio of market-leading services and develops integrated technology solutions to accelerate digital transformation through: Cloud, Data & AI (Adatis), Enterprise Applications (Incremental), Workplace Services, and Cyber Security & Networking.

Values: Open, Trusted, and Bold

• HPE: Platinum Partner – FY23 UK&I Solution Provider of the Year
• Fortinet: Elite VIP Program – one of only 2 in the UK
• AWS: Advanced Solution & Managed Service Provider Program

Job Description

Security Architect - Belfast - Hybrid (2-3 days per week onsite)

The Security Architect is responsible for designing, implementing, and maintaining an organization's overall security architecture. This role involves collaborating with various stakeholders to identify security requirements, developing strategies to address potential threats, and ensuring the confidentiality, integrity, and availability of sensitive information.

The role requires being a key stakeholder in any project that this role is a part of, meaning being a subject matter expert in various areas, leading workshops around security solutions and services independently, and highlighting areas of improvement for our customers to continuously enhance their security posture.

Core responsibilities include:

Security Architecture Design:

• Develop and maintain a comprehensive security architecture that aligns with business goals and regulatory requirements.
• Design and review security solutions, ensuring they meet industry best practices and standards.
• Plan, study, and design a security architecture for IT projects.
• Design, develop, and continuously improve vulnerability assessment, security testing, and risk analysis.
• Design, develop, and continuously improve the security posture of the company's products.
• Provide developers with remediation guidance and advice.
• Evaluate cloud and security technologies.
• Design, develop, and continuously improve security operations.
• Recommend and provide technical leadership for the implementation of security measures to protect information systems, networks, and data.

Risk Assessment and Management:

• Conduct risk assessments to identify potential vulnerabilities and threats.
• Develop risk mitigation strategies and work with relevant teams to implement necessary security measures.

Security Policy Development:

• Establish and enforce security policies, procedures, and standards across the organization.
• Collaborate with legal and compliance teams to ensure policies align with industry regulations.

Security Awareness and Training:

• Provide security training and awareness programs for employees to promote a security-conscious culture.
• Keep abreast of the latest security trends, threats, and technologies.

Collaboration with IT Teams:

• Work closely with IT teams to integrate security measures into the overall IT infrastructure.
• Collaborate with system architects, developers, and administrators to ensure security is incorporated into all aspects of the system development lifecycle.
• Develop and maintain incident response plans to address security incidents promptly.
• Conduct forensic analysis of security incidents to identify root causes and prevent future occurrences.

Security Audits and Compliance:

• Perform regular security audits to assess compliance with established security policies.
• Ensure compliance with industry standards and regulations.

Qualifications

• Industry Recognized Cyber Security Certifications: GSEC, CISSP, CISM, CCSP, CISA
• Experience in the Healthcare Industry
• Experience within IT services / Professional Services

Key Words:

Security Architect - Security Architecture - Security Consultant - CISSP - CISM - CCSP - GSEC

Additional Information

We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for the role, please get in touch.