Enterprise Security Architect

Enterprise Security Architect , London (Remote) £95,000 - £115,000 (plus 11% pension & 25% bonus)

We’re partnered with an insurance business who is expanding their team with the appointment of an Enterprise Security Architect. As the Enterprise Security Architect you will be responsible for the security architecture elements of the Systems Development Life Cycle (SDLC) and will work with the Architecture, Delivery and Change communities to ensure security requirements are adequately built into new systems and solutions.

The talented and experienced Enterprise Security Architect will work closely with the Head of Security Solutions and the Information Security team to use the architecture and artefacts developed in the programme to support the ongoing development of security strategy and security services.

In your role you may be responsible for overseeing other security architects allocated to the programme and its projects (which may be from third party suppliers). You will work to ensure that projects adhere to security requirements, that security risks are adequately managed and there is adequate handover of services to security operations.

Day to Day responsibilities:

• Developing and maintaining the programme’s Security Architecture and associated artefacts.
• Providing guidance, at scale, to the technical and business communities on how to design and build solutions which are secure by design and compliant with their policies, legal and regulatory requirements.
• Maintaining and championing the security architecture elements of the SDLC.
• Support the CISO and the Security Management Leadership in the development of the security strategy and associated security services.
• Provide oversight on the implementation of the security architecture within the Unity programme.

Essential Experience:

• A strong track record of developing security architectures
• Solid understanding of SDLC, including Agile methodologies
• Experience with a broad spectrum of technologies (including cloud variants and integrations)
• Ability to communicate technical requirements in solutions in business terms and contexts
• Relevant architecture qualification (such as SABSA or TOGAF), or equivalent experience
• Relevant security qualification(s), with a preference for CISSP
• Advanced knowledge of security frameworks such as NIST, ISF, SABSA, etc.