Cyber Security

We are recruiting a Security Architect to help us in our journey to continuously improve cyber security delivery at Wirral Council.

The post holder will support the council in aligning with to expected government guidelines, including Cyber Essentials+, PSN, and NCSC security standards.

This will include technical design, policies, and processes.

The Security Architect will work alongside all technical teams to create secure designs as we implement new capabilities and make improvements to current technologies.

PURPOSE

To work with IT management to develop a long-term strategic approach to leveraging existing cyber security technologies. The post holder will support the Council to design standards, policies, processes, and procedures which align with NCSC, ISO27001, and any additional Government targets. They will also work with stakeholders to articulate the value of security architecture across the Council.

Main duties and responsibilities

1. Work with the Council to create security standards and patterns for complex, interdependent services, making technology choices and trade-offs.

2. Make complex information simple to give a blueprint that IT & non-IT teams can follow as needed.

3. Assist with identifying and mitigating technology-related risks and vulnerabilities: coordinate risk assessment, manage agreed actions, and monitor the status of risks on an ongoing basis. Assist with building and executing plans to mitigate these.

4. Support IT teams to design secure services & make appropriate configuration choices within their services.

5. Maintain up-to-date knowledge of emerging technology trends and developments in areas of interest to the organisation seeking to identify where technology might be deployed to deliver business improvements.

6. Exploit new approaches, proposals and technologies as needed.

7. Recommend security training for council leaders and wider staff, to help people understand the interplay between technology and behavioural security.

8. Work with the IT Management Team to persuade stakeholders at the highest levels of the reasoning behind your recommendations and decisions.

9. Keep senior management up to date on security trends and developments and advise them on commercial implications and associated business opportunities and advise and brief other staff as appropriate.

ESSENTIAL CRITERIA

**Qualifications**:

- CISM (Certified Information Security Manager).

OR:

- CISSP (Certified Information Security Systems Professional).

**Knowledge & Skills**
- Expert knowledge and understanding of security and system architectures; the relevant technologies, tools and platforms, best modern practice; industry trends and risks.
- Deep knowledge of modern technology security practices around services, infrastructure, hosting, and platforms.
- Deep knowledge of Microsoft products in Azure.
- Applied knowledge of agile ways of working.
- Ability to bridge the gap between technical and non-technical outcomes, people, and tools; able to turn business outcomes into technical design.
- Ability to communicate with people at all levels within the organisation.
- Ability to review a service or services and identify the risks and vulnerabilities associated with it; ability to plan to mitigate these, to recommend and see through changes.
- Ability to design secure systems to meet specific needs; ability to understand trade-offs in technical choices, and work with others to realise those needs.
- Ability to make and justify complex and high-impact technical, clearly explaining reasoning.
- Ability to direct technology work across multiple cross-functional teams where needed.

**Job Types**: Full-time, Temp to perm
Contract length: 7 months

**Salary**: £550.00-£600.00 per day

**Benefits**:

- Company events
- Company pension
- Gym membership

Schedule:

- Overtime

**Experience**:

- Cyber Security Architect: 6 years (required)
- security and system architectures: 6 years (required)
- Microsoft products in Azure.: 6 years (required)

Licence/Certification:

- CISM (required)
- CISSP (required)

Work authorisation:

- United Kingdom (required)

Work Location: Hybrid remote in Wallasey, CH44

Reference ID: perfect - RQ932986