Security Architect

Key Responsibilities

Support Cybersecurity Architecture

• Support major business transformation programmes by developing and integrating secure cybersecurity architectures across enterprise systems and networks.
  
• Design solutions capable of supporting:
  • Multi -level security requirements.
    
  • Multiple data classification levels across geographically distributed environments.
    

Security Documentation

• Produce and maintain security architecture and systems security engineering documentation throughout the programme lifecycle.
  
• Ensure security deliverables are aligned with organisational and regulatory requirements.
  

Identity & Access Management

• Provide architectural guidance for enterprise Identity and Access Management (IAM) solutions.
  
• Support the design of secure authentication, authorisation and access control models.
  

Secure Configuration Management

• Ensure secure configuration management principles are embedded throughout programme delivery.
  
• Promote security best practices across solution implementation.
  

Security Architecture & Compliance

• Ensure all new and enhanced systems align with enterprise cybersecurity architecture principles, policies and standards.
  
• Support compliance with applicable security and regulatory frameworks.
  

Business Risk & Critical Services

• Work with business stakeholders to identify and prioritise critical business services and functions.
  
• Ensure appropriate security controls are incorporated into solution designs.
  

Security Assurance

• Conduct security architecture reviews throughout programme delivery.
  
• Identify security gaps, risks and areas of non -compliance.
  
• Support the development and delivery of Security Risk Management Plans.
  

Security Impact Assessment

• Assess the impact of new systems, integrations and interfaces on the existing technology landscape and organisational security posture.
  
• Recommend appropriate mitigation strategies where required.
  

Security Design Reviews

• Evaluate security architectures and technical designs against both functional and non -functional requirements.
  
• Ensure solutions meet security, resilience and operational standards.
  

Security Controls

• Determine appropriate technical and procedural security controls for enterprise systems and networks.
  
• Ensure security requirements are documented and incorporated into solution delivery.
  

Stakeholder Collaboration

• Work closely with Enterprise Architecture, Cyber Security, Infrastructure and Delivery teams.
  
• Contribute to technology governance, risk management, compliance reporting and architecture assurance activities.