Security architect

- I am looking for candidates with at least 5 years of relevant work experience in the industry, including a minimum of 2 years in a role related to security architecture. - I expect strong knowledge in key areas of Information Security Technology and experience in applying relevant security controls appropriately. - You should have an understanding of Information Security Consultancy and experience working with clients to capture requirements and formulate solutions. - Familiarity with security architectural and/or enterprise architectural frameworks (e.g., SABSA, TOGAF) is essential. - Experience in developing and implementing an Enterprise Security Strategy is required. - I need you to be capable of delivering security architectures/strategies as part of broader enterprise or IS/IT architecture. - You should be able to interpret and apply applicable standards, policies, and legislation, such as PCI DSS, COBIT, SOX, DPA, HMG SPF, JSP 440, CESG IA Portfolio, ISO27001, etc. - An understanding of threat and risk analysis methodologies/techniques and the interpretation/application of their output in defining security architecture is necessary. - Familiarity with security principles, technologies, and industry standards and frameworks, such as NIST, is expected. - Experience in solutioning and bid work, as well as cloud development and security requirements, is a plus. - Some industry or HMG security experience is desirable depending on skill level.