Security Architect

Description

The company is a global law firm providing legal services in 20 countries through 30 offices.

This role sits within the Technology & Data group and works with teams across the business.

The company wants people who collaborate well and bring an efficient, responsible approach to their work.

Responsibilities

• Design, build and maintain the company's security architecture so that its technology platforms, systems and information assets match business goals, security principles, risk controls and regulatory duties.
• With the Senior Security Architect, set the security architecture vision, strategy and roadmap, then put them into practice.
• Work with security, infrastructure, engineering, data, product and business colleagues to understand their security and technology needs and shape designs that strengthen security while keeping operations effective.
• Champion secure-by-design thinking to support business strategy and protect information assets.
• Advise business and technology teams on architecture options, risks and control needs for applications, infrastructure, cloud, data platforms and third-party solutions.
• Turn business, technical and security requirements into security architecture solutions.
• Create and maintain patterns, standards, principles and policies across platforms, systems and technology areas.
• Review and improve the security, resilience, scalability, reliability and maintainability of architecture across the company.
• Make sure work meets information security policies, risk requirements, legal and regulatory duties, and recognised frameworks and standards.
• Lead security architecture input into projects, platform changes, integrations and system implementations.
• Explain technical guidance to information security, infrastructure, engineering, data, business, Legal & Risk, HR and senior management stakeholders, and help resolve architecture challenges.
• Track new security technologies and trends, and work with the wider Technology & Data teams to build security practice into system designs, configurations and operations.

Requirements

• Substantial experience designing and delivering security architecture patterns, principles and practices in complex business environments.
• A record of managing the full security architecture lifecycle, from design and platform assessment through implementation to optimisation.
• A history of working well with varied stakeholders to understand security and business needs and deliver fitting solutions.
• Skill in developing and maintaining scalable security architecture standards, reference models and control frameworks.
• Ability to spot architectural risks, control gaps and security weaknesses, and to recommend clear fixes and ongoing improvements.
• Good grasp of information security frameworks, risk management and security best practice across enterprise environments.
• Knowledge of legal, regulatory and compliance requirements for information security in global organisations.
• A drive to raise architecture performance with a focus on security, resilience, scalability and operational effectiveness.
• Strong leadership, communication and influencing skills, with the ability to guide teams and explain security requirements to technical and non-technical audiences.
• A degree in computer science, information security or a related field, or equivalent professional experience.
• Familiarity with cloud migration, cyber resilience, DevSecOps, security strategy, security risk management, building security into software development, security architecture design, SIEM, threat analysis and threat modelling.
• Desirable: professional certifications such as CISSP, CompTIA Security+ or equivalent.

Conditions

Duties may extend to other tasks as the role requires.

The company welcomes diversity and inclusion and works to challenge bias.

Benefits

• Private medical insurance.
• Free in-house gym and subsidised health club memberships.
• Free on-site GP service and periodic health assessments.
• Pension and flexible savings options.
• Income protection and life assurance.
• Mortgage advice and will-writing services.
• Electric car and cycle-to-work schemes.
• Emergency family care.
• Extra holiday and birthday leave.
• Maternity, paternity and shared parental leave.
• Travel insurance and season ticket loans.
• Access to sports and social clubs and employee networks, such as the Gender Equality Network, With Pride and Social Mobility Networks.