Cyber Security Architect - Privacy-Preserving DB, Threat Modelling

Cyber Security Architect - Privacy-Preserving Databases, Threat Modelling

£Market Rate - Inside IR35

London / Hybrid

3 months

My client is an instantly recognisable firm who require a hands‑on Cyber Security Architect with deep expertise in securing highly confidential Data (Privacy-Preserving Database) to support the design and development of target state architectures and supporting documentation for the implementation of secure storage of critical, secret Data.

• Proven commercial experience as a hands‑on Cyber Security Architect with specific experience of working on Privacy-Preserving Databases, highly confidential, secret Data
• Ability to produce, maintain, and govern high-quality Security architecture artefacts (design documents, Threat Models, control frameworks, and Data flow diagrams etc)
• The ability to design end‑to‑end Security architectures aligned to organisational strategy and regulatory obligations across cloud, on‑prem, and hybrid environments
• Strong experience defining Security principles, patterns, and guardrails covering Data classification, handling, encryption, key management, access governance, integrity, and monitoring
• Ability to Architect and Design Solutions involving Data classification and handling, Data Loss Prevention (DLP), Data Encryption, Key management (KMS, HSM, cloud-native), Data Access Governance (PAM / IAM / CIEM) and Data integrity and monitoring
• Experience of leading Security roadmaps from current to target state, identifying required capabilities, technology changes, dependencies, risks, and timelines
• Competence in performing Threat Modelling (e.g. STRIDE, MITRE ATT&CK, DREAD)
• Excellent communication skills with the ability to influence senior stakeholders

• Working knowledge of Biometric Security
• Proven experience in Policing / Forensic / High Security Government environments
• Certified Information Systems Security Professional (CISSP) / Certified Cloud Security Professional (CCSP)
• SABSA, TOGAF or equivalent architecture frameworks
• Immediate availability