Information Security Architect

The role

• Working as part of the wider Security Architecture Engineering and Resilience team The Information Security Architect is the responsible authority with the requisite knowledge to work across a wide variety of portfolios providing Information & Cyber Security domain expertise and skills to help provide strategic technical direction that can optimise enterprise outcomes.
• This role focuses on the implementation of Information and Cyber Security across multiple portfolios within CC IT space.
• It is a key role in delivering Information & Cyber Security transformation and helping to ensure that the end vision is being delivered in a secure and resilient way while focusing on the overall experience to the users.
• The Information Security Architect will collaborate on the production of the domain architectural runway built to support future current and near-term business security and resiliency needs.
• The Information Security Architect will also lead the firms IoT Security platform in line with its Smart Building and aligned activities. It will also maintain the assurance posture for IoT and OT devices making sure that Cyber response and monitoring is achieved with the desired visibility and that the IoT and OT devices are secured according to risk.
• The Information Security Architect will be responsible for architecture security patterns and approaches for firm systems and data deploying best practice by default.
• The Information Security Architect will be the first point of all for all matters of technical guidance around security to other subject matter experts in the business.
• At portfolio level the Information Security Architect provides guidance relating to information and cyber security with regards to business changes changes in underlying technologies emerging standards competitive changes and other factors which may drive the business in directions that are outside the purview of agile portfolios.
• The Information Security Architect will be a gatekeeper of Information Security within the CC Architecture Community of Practice and make sure that all platforms are appropriately designed to mitigate information risk and are secured as appropriate and tested as required.
• Information Security architect will work with the Cloud Security Architect to build on the Cloud Centre of Excellence within the firm making sure that all activities are visible and secure.
• Information Security Architect will represent the security function at governance and control activities within the wider IT and firms aligned functions.

• Maintain a high-level holistic vision of Information Security within enterprise solutions and development initiatives.
• Build contribute and maintain Information Security input to domain level roadmaps by demonstrating how they deliver the firms core business capabilities in a secure manner and align to longer term strategic security and business roadmaps.
• Architect Design Build and Run Security services for the wider IT function including IoT OT and IT (on prem and cloud)
• Understand and communicate strategic Information Security themes and other key business drivers for architecture to solution architects and non-technical stakeholders.
• Contribute an Information and Cyber Security perspective to wider architectural initiatives in the portfolio where applicable.
• Attend and participate in Data Governance Board project proposal reviews for use of data to ensure appropriate security and data use.
• Influence Information & Cyber Security best practices with regards to common modelling design and coding practices working closely with our application development teams and technical leads to ensure security across the portfolio.
• Collect generate and analyse innovative ideas and technologies that are applicable to the enterprise in this domain.
• Address Information Security innovation as part of the future of architecture.
• Synchronise the following across solutions whenever applicable :
  • System data security and quality;
  • Production infrastructure;
  • Solution User experience governance;
  • Scalability performance and other non-functional requirements.
• Participate in Release Planning activities from an Information Security Perspective.
• Work with aligned IT functions to asses security architectural requirements and engagement to fit demand
• Keep in touch with the reality of the day-to-day Information Security architecture work listening to the feedback and issues raised by the domain teams to consider and reflect in the roadmaps.

Your experience

• Ideally an Information Security professional with both technical design and engineering expertise in a range of technologies as well as comprehensive knowledge set of Information & Cyber Security frameworks and principles.
• Fully conversant with the Microsoft suite of tools (E5 DFC Sentinel Entra Defender for IoT)
• Should have exposure to Endpoint Data Protection Threat Intelligence and Application Security technologies
• Experience in creating architecture design documents…