Principal Security Architect

We require you to have extensive experience in leading and evaluating the secure design of major products, services, and complex solutions. You should be able to review secure system architectures through the development of patterns and principles. Proven ability to lead decision-making within Architectural Review Boards and as a Technical Design Authority, based on information assurance risk assessment methodology and governance is essential. You should have proficiency in applying security concepts to a technical level across multiple projects, including working with security tools, network security infrastructure technologies, and information security management frameworks (e.g., ISO 27001, NIST). Experience overseeing penetration testing and the ability to effectively translate cyber risk analysis into standards, patterns, and approaches for the safe exploitation of current and emerging technologies are also crucial. A strong understanding of NCSC information security guidance and architecture patterns, alongside familiarity with architecture methodologies such as SABSA and TOGAF, is necessary. Excellent communication skills are required to apply security concepts at a technical level and effectively communicate security and risk implications to both technical and non-technical stakeholders. Additionally, you should have experience considering the security implications of transformation and influencing policy and process, business architecture, and legal and political implications. It is desirable that you possess knowledge of Secure by Design principles.