Cybersecurity Specialist

Job Title: IT Security Architect

Job Summary:

Caraffi is seeking a highly skilled IT Security Architect to join our team. As a key member of our security team, you will be responsible for designing and implementing secure solutions for our IT infrastructure. You will work closely with our development and operational teams to ensure that security is embedded in our delivery processes.

Key Responsibilities:

• Develop and deliver security solutions for IT infrastructure projects, covering everything from requirements gathering to high-level and low-level design, while ensuring compliance with standards and regulatory requirements.
• Architecturally, your duties will include:
• Development of strategies, roadmaps, patterns, and standards.
• Market testing of new security capabilities.
• Security consultancy to major programmes of work.
• Development of business cases to support ongoing Security transformation.
• Assist the Lead Security Architect in crafting and implementing the IT security strategy and services.
• Offer expert advice and guidance to colleagues and business units on implementing secure solutions in line with technical governance processes, policies, and standards.
• Evaluate risk and compliance for large-scale solutions, focusing on environments with 5000+ endpoints, and implement security infrastructure solutions such as SIEM, Access Governance, SASE, and Endpoint Protection.
• Adhere to information security standards (e.g., ISO 27001, ISF, NIST), industry security guidance (OWASP & CIS), and risk assessment frameworks to ensure systems and services meet security requirements.
• Identify and analyze business and technical security requirements, associated risks, and potential vulnerabilities, and apply controls to ensure confidentiality, integrity, and availability.
• Review vulnerability and penetration test reports, offering recommendations for remedial actions.

Requirements:

• Demonstrated success in delivering large-scale solutions in a security architecture role.
• Previous experience working within an Azure cloud security environment.
• Familiarity with working within a Zero Trust Framework.
• Experienced in defining and implementing:
• Architectures based on the Zero Trust framework (Identity Management, MFA, Endpoint Protection etc.).
• Architectures and services based on Secure Access Service Edge (SASE) (Data Loss Prevention, SD-WAN, Network Segregation etc.).
• Technical expertise across a wide range of solutions, such as:
• Secure internet access.
• Threat, Vulnerability & Patch Management.
• Privileged Access Management.
• Network Segregation.
• Security Monitoring.
• Antivirus.
• Data Loss Prevention.
• Outstanding communication skills, both written and verbal, with the ability to explain technical concepts to non-technical stakeholders.
• Proven ability to develop and maintain effective relationships at senior levels within an organisation.
• Capability to prioritise and execute tasks in a dynamic environment, making sound decisions in emergency situations.
• Strong analytical and problem-solving skills, with a dedication to continuous improvement.
• Hold relevant certifications such as CISSP (Certified Information Systems Security Professional) or equivalent.