Ensure that minimum standards for security are established and maintained, and appropriate guidance is provided to support the business, IT operations and delivery.
Maintain blueprints for secure design and configuration of common IT architectures and ensure that the consumption of security controls/services is repeatable and efficient.
Ensure security requirements for projects being delivered throughout the business are standardized, with appropriate due diligence/governance processes being implemented throughout the delivery life cycle.
Ensure security risk mitigation objectives are Embedded by design’ into the development of existing and/or new applications that support product/service lines.
Ensure a consistent and efficient delivery mechanism is in place for the effective implementation of security controls.
Ensure that appropriate service transition requirements are considered and Embedded within projects prior to any new controls/services being operationalized.
Maintain understanding of current and leading-edge information security technologies and how these may be applicable, where applicable translate research into business outcomes.
Design, deliver and maintain the end-to-end target security architecture.
Delivering the security design patterns, with full audit trail.
Developing and maintaining the security architecture control framework.

Skills & Experience:

Comprehensive technical knowledge and practical experience [minimum of 5 years] in Information security/Security architecture in either large-scale enterprise or telecommunications industry.
Experience in enterprise architecture frameworks.
Experience in thread modelling/deign patterns.
Proven Experience in designing and applying security controls into distributed systems (on prem and cloud).
Thorough understanding of the latest security principles, techniques, and protocols.
Demonstrable experience in embedding security into the change life cycle.
Understanding of software-defined network and network function virtualization concepts and technologies.
Familiarity with OWASP Top 10, SANS Top 25, NIST, CIS etc.
Applied understanding of topics such as authentication, access control, encryption, cloud security, operating system security, network security, database security.
Good understanding of practices and methods of IT strategy, enterprise architecture and security architecture Deep understanding of common as well as emerging vulnerabilities and how they manifest in different types of applications (web applications, thick clients, APIs, etc.).

Qualifications:

Security Architecture Consultant Full Time

Log In