Role Purpose

We currently have an opportunity for a Security Architect providing security architecture expertise across Nexor customer engagements, ensuring secure design principles, cyber risk management and information assurance considerations remain integral throughout the solution lifecycle. The role translates customer security requirements, threat information, business needs and technical constraints into coherent security architectures and control strategies.  

Work may span secure information exchange, cross-domain solutions, cloud services, networks, applications, data platforms, operational systems and high-assurance environments. The Security Architect works closely with Solution Architects, Technical Architects, Cyber and Information Assurance Consultants, Engineers, Product Teams and customer security stakeholders. The role carries responsibility for security design quality, technical assurance and the proportionate application of security controls across complex systems.  

Key Responsibilities

• Security Architect 

• Secure Information Exchange 

• Secure-by-design 

• Cyber Risk Management 

• Identity and Access Management 

• Network and Platform Security 

• Data Security 

• Cryptography 

• Security Monitoring and Detection 

• Technical Assurance 

• Customer Engagement  

• Bid and Pre-sales Support 

• Innovation and Technology Development 

Qualifications and Experience

Experience: 

• Professional experience in security architecture, cyber security, systems engineering or a closely related discipline.  

• Experience designing security controls within complex technical systems.  

• Experience working across multidisciplinary architecture and engineering teams.  

• Experience producing security architecture and design documentation.  

• Experience translating cyber risk into technical requirements.  

• Experience assessing solution designs for security weaknesses and control gaps.  

• Experience engaging with technical and non-technical stakeholders.  

• Strong understanding of security throughout the system lifecycle.  

Technical: 

• Security Architecture – SbD, Zero Trust, IAM 

• Network Security – Firewalls, VPN, PAM 

• Data Security – Encryption, Key management, Secure Information Exchange 

• Application and Platform Security  

• Frameworks and Standards – NCSC, ISO 27001, Cyber Essential, MoD 05-138, NIST 

Qualifications: 

• Degree, degree apprenticeship or equivalent professional experience in a relevant discipline 

• Progress towards or possession of; CISSP, SABSA, NCSC Certified, TOGAF, CCSP, ISO 27001 

Personal Skills and Attributes

• A person that shows attributes in line with our values (as below) 

• Commercial / business initiative  

• Excellent stakeholder management  

• Consulting mindset  

Nexor Values 

The role holder will be expected to role model and champion the Nexor core values which are:  Focus, Adaptable, Respect and Collaboration.

This job description is a guide to the work you may be required to undertake but does not form part of your contract of employment and may change from time to time to reflect changing circumstances.