Head of Security Architecture

Role Purpose

As Group Director, Head of Security Architecture, you’ll be a core member of the LSEG Cyber Security team. You’ll lead and set the direction for the Cyber Security Architecture team which delivers across a number of areas:
Principal Security architecture – a team of engineers who ensure security is built in to all projects across the group. Each architect is aligned to our business units and builds a deep relationship with the teams in that unit.
Security Architecture Design – a central function that delivers design patterns to ensure a consistent implementation of our controls across the group. This team researches new technologies, and provides guidance on how to secure them. They also run a project to provide a risk posture review across the application portfolio against our standards. This team also runs design forums, assists in policy and standard creation, and provides consulting on hard security problems as needed.

Security Architecture review – a central function that delivers a range of security reviews – architecture governance reviews for new build and change projects; network perimeter / firewall reviews to ensure changes are in line with agreed architectures; and third party reviews ensuring our vendor / supply chain portfolio meets our security standards. You and your teams will be involved in all major projects in the group – ranging from technology new build, cloud migration projects, transformation programs, as well as mergers, acquisition and divestments.

As a critical national infrastructure provider across many global regulated markets, you will ensure our technology systems are architected to meet the security rules expected by regulators and our customers and partners.

• Leads the development and execution of strategy for Security Architecture team, setting and driving the achievement of KPIs and objectives through effective leadership and ensuring alignment with the broader Cyber Security and Architecture Functions’ strategy
• Manages performance, development and wellbeing of a team of architects across various technology domains to providing end to end architecture services
• Owns the relationships with key stakeholders – including Cyber Security peers, group CTO, Heads of Architecture, First and Second line Engineering Risk, Business Information Security Officers. Defines, Manages and Operates the key functions of the Security Architecture team – Secure Design;
  Principal Security Architecture;
  Security Architecture review.
• Defines architecture principles, policies and standards to produce function specific reference architectures and patterns
• Contributes to the development of global enterprise standards for the central Architecture & Technology Strategy function
• Builds relationships with vendors, regulators and industry bodies to seek and adopt industry best practices in enterprise architecture and technology strategy
• Seeks latest technology and business innovations relevant for the function (e.g., Automation, Artificial Intelligence, Quantum Computing etc.)
• Acts as trusted advisor and leader across the wider LSEG Engineering group.
• Ensure Engineering projects meet critical security regulations [DORA, LPM etc]
• Leads security engagement on major transformation protects.

• Knowledge of financial market infrastructure technology, and experience in deploying pragmatic security controls (e.g. trading systems, market data systems, low latency technology)
• Enterprise Architecture, Technology Strategy, Cloud, Security, Applications and Infrastructure
• Performing detailed security reviews of complex systems
• Experience of working with architectural development methodology, standards development, technology architecture
• Qualifications in security leadership, such as but not limited to CISSP, CISMP or CISM and TOGAF in architecture
• Modern engineering practices, agile practices, automation and deployment pipelines.
• Extensive experience in Enterprise Architecture and Technology Strategy across multiple Financial Services organisations, or similarly regulated organisations, that provide Technology Services to revenue generating divisions within large…