Compliance and Assurance Security Architect

Compliance and Assurance Security Architect 6-Month contract – Inside IR35 – up to £650 per day London based – hybrid working – 3 days onsite Due to the nature of the role, active DV Clearance is required to be considered

Job Summary

The aim of the programme is to replace our core Information Management Application by building a data store and a modern, fit-for-purpose application which makes use of the information stored within it and supports our business processes. As part of the Programme Team, you will work closely with the Application Development team and other stakeholders to apply your knowledge and experience in support of the development of the new Information Management Application.

Key Tasks

The post holder will be required to do the following:

• As Security Architect you will have the capability to deal with complex, sometimes unique situations, which will require deep technical expertise and the ability to communicate complex security concepts to both technical and non-technical audiences.
• You will work on services of high complexity and risk, enabling the business to achieve its needs.
• At this level, you will:
• Have a deep and evolving level of technical expertise.
• Make and influence important architectural decisions.
• Be a recognised expert and demonstrate this expertise by solving unprecedented issues and problems.
• Further the profession, demonstrating and sharing best practice within and outside the organisation.

Key Skills

The post holder must have the following skills:

• Analysis Monitor changes in the technical environment and assess whether risks are still at acceptable levels or whether previous decisions need to be revisited.
• Direct and influence others on best practice and policy.
• Communication Demonstrate expert understanding of security concepts and can apply them to a technical level, at the highest levels of risk complexity.
• Effectively translate and accurately communicate security and risk implications at the most senior levels across technical and non-technical stakeholders.
• Successfully respond to challenges.
• Manage stakeholder expectations across high risk and complexity or under constrained timescales.
• Designing Secure Systems Lead the security design and review solutions to complex problems with system architectures by defining and challenging patterns and principles.
• Enabling and Informing Risk Based Decisions Be trusted by senior risk owners as an expert in security.
• Apply risk methodologies at the most complex levels of risk.
• Research and Innovation Contribute to and inform developments on security properties in the technology.
• Contribute to the Identification of new technologies i.e. Artificial Intelligence and understand the potential associated risks and benefits.
• Engage with the broader security community.
• Security Technology Demonstrate strong knowledge of system architectures, including those found on-premise, or within private and public cloud environments.
• Understand and articulate the impact of vulnerabilities on existing and future designs and systems, and how easy or difficult it will be to exploit these vulnerabilities.
• Understanding Security Implications of Transformation Challenge and support changes to policy and processes to support business outcomes, business architecture, and legal and political implications.

Experience - Mandatory

• Experience of working on large scale Business Change and IT enabled Transformation Programmes.
• Experience of implementing or advising on security projects to drive down strategic security risks.
• Experience of working in a complex high-profile environment.
• Must be able to show ability to manage multiple stakeholders including large IT Service providers, Security and Data Protection Authorities, Commercial and Business teams.
• Excellent listening and oral skills with the ability to present information appropriately by audience.
• Experience of working within secure technology-based projects and programmes enabling business change.
• Ability to work under pressure and to turn-round communications to meet tight deadlines.
• Experience of working as a key member within a high-performance team.
• Experience of developing and working with audit processes and challenge functions.
• An understanding of the commercial, operational, technical and supply infrastructure in which successful programmes and projects are delivered.
• A record of successfully supporting secure national projects on time and on budget in a complex environment which uses both in-house and supplier-based delivery method.
• Experience and knowledge of the security accreditation processes at a national level at all Government security Classification (GSC) levels.
• Understanding of the Cabinet Office Security Policy Framework (SPF), and knowledge of security policy at the higher security classifications.

Experience - Desirable

• Experience of working within the Policing sector.
• Cyber / Information Security qualification, such as CISSP or CISM