Security Architect - Contract

Security Architect - Contract – Hybrid/ Remote We are looking for a Security Architect to support our project team on a large programme in the UK. Working with our lead Architect you will be defining the target security architecture, anticipating emerging threats and leveraging technologies, and turning that thinking into a practical blueprint of technical controls with clear, achievable roadmaps. Strategy and roadmaps

• Develop and maintain a security architecture roadmap that is directly aligned to business goals
• Design innovative, risk-led security solutions that enable the business rather than constrain it
• Own the creation, rollout and upkeep of corporate security policies and procedures

Programme and project consultancy

• Act as trusted security adviser to large-scale IT and business-led programmes
• Lead the security contribution to design workshops, explaining risk and the mitigations required in business terms
• Work hands-on with project teams, clients and stakeholders to shape needs, define requirements and priorities, evaluate solution options and develop the chosen design

Technical leadership

• Validate implemented security designs to confirm they perform as intended
• Provide technical direction and mentoring to security operations teams
• Build influence and trust with stakeholders at every level of the organisation

Your background You’ll have a proven history of designing network and IT security solutions, ideally in comparable environments, along with:

• Working knowledge of security frameworks including ISO 27001/27002, Cyber Essentials and NIST CSF
• Strong grounding in security governance, risk and compliance (GRC)
• Experience of vulnerability assessment and vulnerability management
• Endpoint protection experience (anti-virus and anti-malware)
• Familiarity with SIEM platforms and SOC operations
• Design or engineering experience across network security technologies: firewalls, IDS/IPS, web proxies and email gateways
• Excellent communication skills and a track record of building strong stakeholder relationships

Nice to have: CISSP, CISM, CISA, CEH, TOGAF or MODAF certification, or equivalent experience.