Job Description

Data Security Architect

Location: Bristol, Leeds, Manchester, Halifax, Edinburgh, London

Duration: 6 Months

Bank is having 2 major initiatives kicking off in the near future

* Modernising our data loss management

* Reinventing our cryptography ecosystem

Role Description

* Experience on data discovery tools, controlling the movement of data, developing governance for the application of security controls

* Understanding modern development methodologies and how to embed things like ci/cd pipelines.

* Develop an orchestration tier to manage all crypto tools (KMS, HSM, certificates, secrets, etc) and a presentation tier (CLI and API) so we can abstract the developers from any crypto assets

* Define the solution architecture of the project, translating business requirements into IT solutions – taking into account existing IT systems and complexities.

* Validate and QA of the architectural components and building blocks that will be used to construct compliant, secure and trustworthy security services.

*

Key Responsibilities

* Technical ownership of key CSO deliverables, Data Security Designs, HLD/LLD

* Participate in the architecture board to discuss strategy about services and their integration with existing technologies within the organisation.

* Working with architects and engineers to collaboratively define the mid and low-level security requirements into a collection of design and engineering activities to ensure that the programme is delivering against agreed security standards and principles

* Proactively identifying security risks not exclusively as part of the design/engineering process

* Owning the end-to-end security view for specific platform components, shared services or application integration items

* Performing threat modelling against architectures, engineered solutions, and as-is platforms

* Ensuring that security activities are aligned with the wider security strategy

* Working in a multi-disciplined autonomous team delivering security value on behalf the team

Key Skills

* GCP/Azure Data Security

* Design, Architecture, Engineering

* Data Security, Data Loss Prevention

* DLP tools Symantec, Hashi Corp Vault,

* Cryptography, PKI, HSM, Cloud KMS

* Cloud Certificate Management)

* Certifications such as:

* Microsoft Certified: Azure Security Engineer Associate

* Google Certified Security Engineer

* Certified Cloud Security Professional (CSSP)

* Experience working within an agile framework

* Experience working with Microsoft Azure or Google Cloud