Security Architect

The role will require high attention to detail, working with the development teams, security team and customer representatives to research control options, determine the combination of control implementations that will best mitigate the risks faced by thesystem(s), as well as to record the detailed implementation of security controls in the design and to define the testing required.

**What you will be doing**:

- Understands the business and information risk context, and propose architectures and countermeasures to mitigate risks from solutions
- Works closely with information risk advisors, accreditors, solution architects and system engineers to enable secure definition, delivery and configuration of ICT systems
- Assures implementation of security controls to mitigate risks
- Provides expert technical advice to support the design and development secure architectures
- Inputs detail on security control implementations and testing into to security risk management tooling
- Supports security consultants by providing security control details, any gaps, and provide evidence of implementations.
- Supports the Security Lead in wider operational security delivery including advocating a strong security culture and training to new joiners
- Works with wider business stakeholders including customers, suppliers, and internal teams to ensure successful project delivery.
- Advises on appropriate security controls to mitigate security architecture risks.

**?**

**What you will bring**:

- Experience of delivering cloud environments which follow the principals of secure by design
- Information Security experience within a large organisation
- Ability to articulate and pitch security advice, often at a technical level, directly to key customer stakeholders
- Ability to prioritise workload, work well under pressure and concurrently manage both customer and Sopra Steria expectations
- Hands-on experience of architecting secure solutions
- Experience of designing and/or implementing security controls using Microsoft standard tooling in a large organisation
- A clear understanding of UK Government Security Frameworks including the Security Policy Framework and NCSC Good Practice guidance
- Experience in providing advice on data protection, information security and business continuity

**?**

**It would be great if you have**:

- Network security architecture principles such as network zoning and segmentation
- CISA, CISSP, CISM, or CIA would be highly desirable or equivalent experience

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you

**Employment Type**: Permanent, full-time
**Location**: Home-based, remote
**Security Clearance Level**: Must be eligible for BPSS
**Salary**:£53,000 - £80,000

**Benefits**: 25 days annual leave with the choice to buy additional days, life assurance, pension, car allowance and generous flexible benefits fund

**Loved reading about this job and want to know more about our company?**
Sopra Steria’s Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privilegedenvironment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work forthe customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety
- and security-critical markets.

Our technical specialists deploy systems running many of the major operating systems such as Microsoft Windows, Mac OS, and multiple Linux distros. We also provide Messaging and Collaboration systems and support, Application packaging and deployment, alongwith supporting Infrastructure and Cloud services and support. Our time can be split between our services and project work, so we have the chance to be multi-disciplined and access to a range of technologies.