Security Architect

**Description**:
Overview of Department

Security and Architecture Teams

The Security and Architecture teams work across the full breadth of Information Systems and the wider business, providing support, standards and oversight to all relevant projects and technologies. The Security area is made up of several specialist teamsincluding CSOC, SAM and Security Integrations which all work closely with our CISO, Business Risk and Operational Teams, where they cover a broad range of Information Security disciplines. Similarly, our Architecture Team works across the full range of Architecturedisciplines ensuring projects and technology are delivered in line with established strategies and standards.

The Role

With the relatively recent establishment of our Architecture Team and recent expansion of the Security area you will be joining at an exciting time as we look to develop our Security Architecture capability. Working with both teams you will help to lay thefoundations of a Security Architecture practice

Initial work will include reviewing and feeding into existing processes and patterns to ensure security has been appropriately considered including the templating of security materials where required. Subsequently you will work across delivery and technologydomains to review, interpret, and respond to business requirements, championing information security solutions, ensuring that Baillie Gifford can deliver business needs securely.

You will provide authoritative advice and guidance to ensure common tools and patterns are used effectively to deliver secure systems and implement proportionate controls to enable business outcomes. You will also be expected to provide a good understandingof relevant threats, vulnerabilities and exploits in their applicability to Baillie Gifford systems and services. Ultimately helping to evaluate the risks they pose and providing input in relation to any appropriate remediation

Key Responsibilities:

- Ensure cyber security is considered when client and business requirements are translated into technology solutions
- Develop Security Architecture Standards and Artefacts to be produced and used across our technology estate
- Provide pragmatic guidance to delivery teams on how to design and build solutions which are secure by design. Implementing proportionate controls to enable business outcomes, with these controls becoming design patterns for reuse
- Contribute to client's cyber security strategy and ensure its uptake throughout the business
- Drive value from current solutions to ensure they remain fit for purpose in an ever-changing cyber world
- Assess the marketplace of security related products and recommend relevant technologies for adoption within the firm

Skills & Experience:
Experience and Knowledge
- Understanding across information security and cyber security
- Track record of delivering secure cloud-based systems
- Awareness of the security threat landscape
- Good understanding of DevSecOps principles
- Foundational understanding of risk management
- Understanding of both network security and end-user & device security
- Passion for technology, self-development and cyber security
- Awareness of SABSA/Zachman/TOGAF Frameworks
- Understanding of the need to design for compliance to applicable privacy and data security legislation

Abilities and Skills
- Passion for architecting technology solutions
- Forward planning, strategic thinking and idea generation
- Sense of ownership and responsibility
- Relationship building and ability to influence others
- Strong collaboration skills and a team player
- Strong written and verbal communication skills
- Commercial and business awareness
- Technical competence

Personal attributes:
Don't have to have built a security architecture function previously - need to be curious and want to understand how this could be done and build relationships.

**Skills**:

- Security
- TOGAF
- Data Security
- Secure code
- devsecops
- solution architecture
- solutions design
- cyber security
- network security
- ISO-27001
- SABSA
- Zachman

**Employee Value Proposition**:
**Job Title**: Security Architect

**Location**: Edinburgh, UK

**Job Type**: Contract

We are pa