Senior Security Architect

Henderson Scott ,
Havant, Hampshire
Job Type: Full-time

Overview

Senior Security Architect - Havant Henderson Scott are looking to recruit for a Senior Security Architect for our customer. The role of the Senior Security Architect will include the planning process that provides the models, templates and principles that are used to design, implement and operate information security solutions. You will be responsible for the enabling of consistency, leverage and reuse to satisfy the business requirements for security services in an optimum manner. This role demands business insight; technical acuity; and the ability to think, communicate and write at various levels of abstraction. Key Aspects of the Role: Working closely with enterprise architects, other functional area architects and security specialists to ensure adequate security solutions are in place throughout all IT systems. Develops the business, information and technical artefacts that constitute the enterprise information security architecture and solutions. Serves as a security expert in application development, database design, network and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Contributes to the alignment of security governance with EA governance and project and portfolio management (PPM) Researches, designs and advocates new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners and vendors. Contributes to the development and maintenance of the information security strategy. Evaluates and develops secure solutions, based on approved security architectures. Manage the security architecture to support the implementation of policy, standards and other security requirements within the project Ensure protection of information using data-centric security approaches. Ensure alignment with system life cycle through security risk assessments and input into design and architecture. Assist project members in the identification, specification, design and implementation of appropriate security controls Coordinate and assist on security testing, including third party penetration testing Perform risk assessments and threat models to derive control objectives Provide updates on risks, threats and overall security status to Information Security management and other stakeholders Desirable Attributes: -Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials, is required. Formal training and experience in a relevant enterprise architecture methodology (for example, the Zachman Framework or TOGAF).