Cyber Security Architect Job Description Template
Our company is looking for a Cyber Security Architect to join our team.
Responsibilities:
- Remain abreast of operational technologies, systems and services, and provide thought leadership in designated technology areas;
- Ensure that appropriate security controls are deployed and maintained across our enterprise and processes in line with good practice;
- Any other ad hoc duties as and when required;
- Ensure that all end user workstations are kept up-to-date with AV and Windows patches and run regular reports to determine any shortfall;
- Work with the IT Department to maintain and support key systems and services, including the firm’s network infrastructure;
- Manage and configure external access solutions offered by the firm in conjunction with third parties;
- Provide out-of-hours cover for security breaches if required;
- Assess upgrades and alternative technologies for the firm’s software, systems and infrastructure where necessary;
- Manage and configure internal load balancing devices for clustered services such as our Finance systems.
Requirements:
- Designing security controls and providing guidance on their use for both on premise technologies and cloud hosted solutions;
- Experience looking after technology initiatives and making sure they’re designed and built with the correct levels of security and compliance;
- Experience creating and maintaining technical roadmaps;
- Ensuring that key risks and issues are identified and resolved in line with the information risk policies;
- Security or architecture specific certifications are advantageous (e.g. CISSP, SANS GIAC, SABSA, TOGAF etc.);
- Experience reviewing new systems and services as well as technologies and tools;
- Strong Cloud architecture and multiple domain experience;
- Ability to design, build, test and implement cyber security solutions;
- Ability to map governance and compliance frameworks and controls to technical implementation;
- The ability to identify and detail security processes, techniques and governance into solutions;
- Security roadmap and strategy development;
- Familiarity working in and across large geo-disperesed teams;
- Ability to prioritise and validate the threats that really matter;
- Ability to define principles, policies, standards and governance;
- Shifting security processes as far left as possible. Build standards that are a part of the solution – not an after thought.