Security Architect

Public Sector Resourcing • London Britain Township, PA

2d • Hybrid

About The Position

On behalf of DBT, we are looking for a Security Architect (Inside IR35) for a 12 Months contract based Hybrid/ in DBT Hubs. As a Security Architect, your main responsibilities will be Threat Assessments and Security Architecture reviews on incoming services from the BIST MoG. This will include following the BIST Threat Model Strategy and templates, gathering documentation on services and creating accurate understanding of Cyber Impact these services will bring to BIST. The benefit of this work will provide BIST a greater understanding of the services and the risk they are carrying providing key knowledge to the Assurance teams on what to prioritise. Communicating with non MoG teams primarily platform teams for destination platforms of the services. This will be to ensure the right technologies are in place to ensure the service works effectively but it also in scope to be monitored by BIST SIEM solution (MS Sentinel). Evidence and Documentation Gathering that relates to Secure by Design, business continuity plans, incident management plans and Business Impact Assessments. Where applicable working with the incoming teams on creating these documents before migration. Work with risk, delivery, data and business analysis colleagues to align assurance and governance processes, ensuring proposals are consistent with departmental, assurances, standards, NCSC Secure by Design principles, Technology Code of Practice requirements and programme approval gates. Deliverables: Assurance Plan, Architecture Governance Framework, Risk and Issue Register, Technical Assurance Papers, ARB/TDA Approval Submissions.

Requirements

• SC Clearance is an essential requirement for this role; candidates must be willing & eligible to undergo checks.
• Threat Modelling & Security Architecture Review experience conducting cyber risk assessments and evaluating the security impact of new services and platforms.
• Security Assurance & Risk Management expertise in identifying, assessing and communicating security risks, threats and mitigation strategies.
• Microsoft Security Technologies & SIEM Integration knowledge of Microsoft Sentinel, security monitoring, logging and onboarding services into enterprise security platforms.
• Secure by Design & Security Governance experience applying NCSC Secure by Design principles, Technology Code of Practice and security assurance frameworks.
• Security Documentation & Compliance capability to develop and review Business Impact Assessments, Business Continuity Plans, Incident Management Plans and security evidence packs.
• Stakeholder Engagement & Technical Collaboration skills to work effectively with platform, delivery, data and business teams to ensure secure, compliant and operationally resilient solutions.
• Must be willing and eligible to undergo security checks.
• Must be willing to work within the UK only.

Nice To Haves

• Preference may be given to candidates who hold active security clearance.
• Preference may be given to candidates who hold active security clearance.

Responsibilities

• Conduct Threat Assessments and Security Architecture reviews on incoming services from the BIST MoG, following the BIST Threat Model Strategy and templates.
• Gather documentation on services and create an accurate understanding of the Cyber Impact these services will bring to BIST.
• Communicate with non MoG teams, primarily platform teams for destination platforms of the services, to ensure the right technologies are in place and services are monitored by BIST SIEM solution (MS Sentinel).
• Gather evidence and documentation related to Secure by Design, business continuity plans, incident management plans, and Business Impact Assessments, and work with incoming teams to create these documents before migration.
• Collaborate with risk, delivery, data, and business analysis colleagues to align assurance and governance processes, ensuring proposals are consistent with departmental standards, NCSC Secure by Design principles, Technology Code of Practice requirements, and programme approval gates.

Benefits

• Disability Confident employer encourages applications from disabled and neurodivergent candidates.
• As a signatory of the Armed Forces Covenant, DBT welcome applications from veterans, service leavers, reservists and military spouses or partners.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed