Information Security Architect

Group IT are recruiting for an Information Security Architect on a full-time permanent basis.Hit Apply below to send your application for consideration Ensure that your CV is up to date, and that you have read the job specs first.Reporting into the Chief Information Security Officer, you will provide expert advice and support on the selection, design, development, justification and implementation of IT security that aligns with business goals, while ensuring that the appropriate level of confidentiality, integrity, availability, accountability and relevant compliance is maintained and aligns with the business risk appetite.Skills & experience you can bring to the role:An expert knowledge and understanding of (including implementation) of Security by Design (including Privacy by Design), Defence in Depth, Attack lifecycle, Secure System Development LifecycleDetailed knowledge and understanding of the latest cybersecurity frameworks and standards and their implementation.Extensive knowledge and understanding of security at all levels of the OSI model.A well-grounded understanding and experience of networking, infrastructure, middleware and software development.Excellent knowledge of IT networking, security infrastructure and modern operating systemsExpert understanding of applying security principles and ensuring compliances in IaaS, PaaS and SaaS environments.Technical Architectural level experience, including infrastructure, networking and applicationExpert knowledge of security principles and technologies as well as Risk Management and risk methodologiesExcellent written and oral communication skills at all levels, strong communicator and ability to articulate and communicate complex IT-related business issues to senior staff in a manner than business stakeholders will understand.Good commercial awareness of the potential business impact of Information Security and a pragmatic approach to ensuring Information Security is a business enablerExpert knowledge in the implementation and operation of SecDevOpsGood working knowledge of AWS (architecture, services and tools) and how Information Security best practice should be implemented and monitored.Knowledge of the cloud vendor frameworks and cloud technologiesStrong knowledge and use of threat modelling frameworks and methodologiesPractical experience of designing and developing solutions across large scale infrastructuresCloud-based cyber security principles and architecture pointsBoundary controls, network segmentation and access controlIdentity and Access Management (including RBAC, SoD, permissions management)Cryptographic techniques and implementationsVulnerability Management and PatchingServerless, Containerisation and virtual machine securityExtensive experience of creating and reviewing design documentation.Good working knowledge of MITRE ATT&CK.Good working knowledge and understanding of ISO27001/2, DPA 2018 / UK GDPR, EU AI Act, EU NIS 2 and relevant standards / legislation.Experience of Architecting innovative Information Security technology systems in a consumer-facing sectorExperience of security management tools and techniquesSecuring and leveraging AIWhat can we offer you?Along with a competitive salary, car schemes (including cars for family members), discretionary bonus, enhanced pension contributions, private healthcare, 27 days holiday plus bank holidays, 4 x life assurance & health & wellbeing support, we also offer a wide range of flexible benefits to suit you and your lifestyle.Volkswagen GroupWe’re driven by difference. With six big brands under one roof – each with its own history, designs and innovations – we’ve created some of the world’s most iconic vehicles, from luxury sports cars to family camper vans. Here, you’ll discover opportunities, explore ideas and tackle challenges that you won’t find anywhere else.It takes a range of teams to make the Group successful. We all share the same aim: to deliver sustainable mobility for generations to come, while keeping the customer and their changing demands at the heart of everything we do.There’s never been a more exciting time to join our industry as it undergoes the biggest transformation for over 100 years. With digitalisation, electrification and driverless mobility all coming to the market, we’re actively looking for people with new skills, knowledge, and outlooks. A brave new world demands brave, new, diverse people; so whatever your background, we would love to hear from you. We know that different perspectives and thought processes are vital as our industry goes through an exciting period of change.To avoid disappointment, you are advised to submit your application as soon as possible as we reserve the right to close the vacancy early if a high volume of applications are received. This is to ensure that we can manage the application levels whilst maintaining a positive candidate experience. xwwtmva Unfortunately, once a vacancy has closed, we are unable to consider further applications.