Security Architect

Hybrid role based in London - 3 -4 days remote, 1- 2 days at the office

£530.00 per day Via Ltd

TO INTERVIEW AND START ASAP

6- 12-month contract

Our client has an opportunity for a Security Architect to join their team. You will help set the organisation's information security technical standards in relation to the whole lifecycle of procurement, configuration, operation, and decommissioning of IT products and services.

DUTIES IN THE ROLE

•Develop comprehensive security architectures and strategies tailored to organisations' specific needs and risk profiles.

•To work closely with the architecture practice to assist with baking security into the organisations architectural standards. ?

•To advise and guide ISD Solution Architects and product team as required.

•To assist product teams to become more security aware and capable of managing their own security responsibilities

•Serve as a subject matter expert on security architecture, providing thought leadership and innovative solutions.

•Oversee the implementation of security solutions, ensuring they align with architectural principles and best practices.

•Design and implement robust security architectures encompassing network, infrastructure, cloud, and application security.

•Conduct assessments of integration with third-party software and SaaS solutions, evaluating both design and actual implementation.

SKILLS AND EXPERIENCE

•Experience in using architecture methodologies such as SABSA, Zachman /or TOGAF

•Documented experience and a strong working knowledge of the methodologies to conduct threat modeling exercises on new applications and services

•CISSP, CISA, CISM, TOGAF, relevant SANS/GIAC certifications or similar.

•Full-stack knowledge of IT infrastructure

•Direct experience designing IAM technologies and services

•Strong working knowledge of IT service management (e.g., ITIL-related disciplines

•Essential Direct, hands-on experience or a strong working knowledge of vulnerability management tools

• Experience designing the deployment of applications and infrastructure into public cloud services

•Verifiable experience reviewing application code for security vulnerabilities