Senior Cyber & Information Security Architect, Remote in the UK

We are looking for curious, inquisitive, and proactive team members to take the opportunity of coming into a greenfield environment, working alongside hyper-scalers and  telecoms providers to design, build and provide assurance for security aware NOC services globally.

Day to Day

• Support the delivery of the Indigo cyber & information security strategy and operational security activities.
• Providing guidance, advice, and oversight by defining cyber & information security architecture standards in-line with policies.
• Drive the implementation of information & cyber security controls across the landscape and customer projects in-line with industry best practices appropriate for critical infrastructure services.
• Design and guide the implementation of technical security standards and cyber security architecture aligned to industry requirements, best practices and ISO27001 and NIST CSF.
• Design an in-depth approach for information security architecture that will help in identifying threats and reducing the risk profile across all areas of the environment.
• Work across the Cyber & Information Security and IT functions to increase the adoption of security architecture patterns and consistent technical standards and guidelines.
• Become instrumental in the support of change control processes, conducting security impact analyses and being able to act as the cyber & information security approver as required.
• Provide support and guidance in all areas to ensure developing and maintaining an agile and secure development of business applications and systems in line with DevSecOps business processes.
• Keep abreast of the latest cyber threats that may impact business services & operations whilst providing advice on countermeasures to be adopted.
• Act as the cyber & information security architectural advisor by providing technical security consultancy on customer projects and deliverables, in-line with contractual obligations, compliance requirements and our reference security architecture.

Information Security

• Develops and communicates corporate information security policy, standards and guidelines. 
• Ensures architectural principles are applied during design to reduce risk. Drives adoption and adherence to policy, standards and guidelines.
• Contributes to the development of organisational strategies that address information control requirements. Identifies and monitors environmental and market trends and proactively assesses impact on business strategies, benefits and risks.
• Leads the provision of authoritative advice and guidance on the requirements for security controls in collaboration with subject matter experts.

Solution Architecture

• Leads the development of solution architectures in specific business, infrastructure, or functional areas.
• Lead the preparation of technical plans and ensures that appropriate technical resources are made available.
• Ensures that appropriate tools and methods are available, understood and employed in architecture development.
• Provides technical guidance and governance on solution development and integration. Evaluates requests for changes and deviations from specifications and recommends actions.
• Ensures that relevant technical strategies, policies, standards, and practices (including security) are applied correctly.

Qualifications

• At least one: CISM or CISSP
• Nice to have: CRISC, CISA, CCSK, CCSP, or Microsoft 365 Security Administrator (MS-500)
• At least one: Azure Solutions Architect (AZ-305)  or Microsoft Cybersecurity Architect (SC-100)