Role Purpose
This is an exciting opportunity for an experienced cybersecurity professional to develop and implement security strategies, architecture, policies, and processes that protect my client's platforms, systems, and data from unauthorized access and attacks. You will also drive policy implementation, monitor compliance, and address policy exceptions and emerging threats.
Nature and Scope
You will assess vulnerabilities across various IT disciplines to protect my client's platforms, systems, and data from potential damage, financial loss, and reputational harm. Your role as Security Architect is to minimize these risks through effective security strategies and policies and ensure their adoption across the organization.
Accountabilities
- Lead IT security projects to enhance my client's security posture in line with policies.
- Collaborate with and oversee managed security partners.
- Develop and maintain IT security policies, standards, and guidelines.
- Ensure policies align with industry best practices and business requirements.
- Implement secure design, threat modeling, and security control frameworks (NIS2, ISO 27000, etc.).
- Balance business requirements with information security.
- Enable secure adoption of new technologies.
- Advise on security issues and resolve concerns.
- Assess applications and infrastructure for security compliance.
- Develop procedures for key security processes.
- Monitor emerging threats and assess risks.
- Influence migration to target security architecture.
- Guide projects and operations in designing effective security solutions.
- Stay informed on IT security developments and assess relevance to my client.
- Promote security awareness among staff.
- Conduct IT security risk assessments.
- Manage security incidents and exceptions.
- Ensure compliance with health and safety and assist with GDPR compliance.
- Apply zero trust architecture (ZTA) principles.
- Align with company culture and values to enhance customer growth and retention.
Key Performance Indicators
- Minimized impact of security breaches.
- Consistent adoption of security architecture and processes.
- Balanced, cost-effective security measures.
- Secure integration of new technologies.
- Effective embedding of security into operations.
Role Specific Technical Skills
- Extensive knowledge of IT security practices and standards.
- Experience with IT security technologies (e.g., encryption, authentication).
- Implementation of multi-factor authentication and secure application design.
- Ability to assess security threats and controls.
- Conduct penetration tests with third-party suppliers.
- Awareness of legal/regulatory security requirements (e.g., GDPR, PCI DSS).
- Strong IT architecture understanding.
- Knowledge of NIS2 and ISO 27001.
- Security and network certifications (CISSP, CISM, CCNA, CCNP, CCIE).
- MSc in cybersecurity or related field is a plus.
- Telecommunications industry expertise is a bonus.
Competency Profile
- Excellent team player with strong interpersonal skills.
- Problem-solving ability and strategic perspective.
- Leadership and influence to achieve common goals.
- Excellent written and verbal communication.
- Highly motivated self-starter.
- Experience managing conflicts with internal and client teams.
- Ability to tailor messages for diverse audiences, including senior managers.
- Innovative and adaptable to change.
