IT Security Solution Architect

My client, an International Bank, based in London, are looking for an IT Security (Secure - By - Design) Solution Architect to join their growing team.

MAIN PURPOSE OF THE ROLE

• To lead a team of Governance Risk and Control SMEs responsible for carrying out IT Security Assessments (Secure-by-Design) on technology projects.
• To ensure that all projects comply with IT security policies and requirements.

KEY RESPONSIBILITIES

In this role, you will be responsible for managing the secure-by-design team activities across my client's banking arm and securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs you. The responsibilities include, but not limited to:

• Delivering on the secure-by-design process to help ensure that all relevant TEC projects undergo security review prior to implementation.
• Managing the team of GRC SMEs delivering on the Secure-by-Design activities: Outlining relevant KPIs and measuring the team against the KPIs
• Interviewing business and technology stakeholders responsible for controls (technical and non-technical)
• Reviewing the team’s reports and conclusions and ensuring suitability of the relevant evidence required to demonstrate the operating effectiveness
• Developing a testing strategy for testing operating effectiveness of controls
• Arriving at informed conclusions regarding gaps in control operating effectiveness
• Documentation of risks, gaps, findings and recommended actions
• Managing your and the team’s time to ensure testing is completed in a timely manner

WORK EXPERIENCE

Essential

• Experience in managing multiple tasks with broad scope, ambiguity, and high degree of difficulty
• Experience in providing assurance for cybersecurity technologies, policies, standards and procedures
• Demonstrable proficiency in a wide range of information IT security domains such as Security Governance, Identity and Access Management, Access Controls, Threat Intelligence, Asset Management, Risk Management, Security Assessment/Testing, Security Incident Management and Vulnerability and Patch Management
• Understand global IT risk management structure
• Demonstrable experience of senior stakeholder management and relevant management reporting.
• Ability to coach team members through knowledge transfer and constructive feedback

SKILLS AND EXPERIENCE

Functional / Technical Competencies

Essential:

• Good understanding of cybersecurity/IT control frameworks including but not limited to frameworks from SOX, FFIEC, ISO27001, NIST, Cloud Security Alliance, and PCI-DSS
• Good managerial skills
• Experience of working as an IT auditor, security auditor or governance, risk and compliance analyst
• Proven understanding of current best practice approach to security assurance and the application of security frameworks
• Planning and prioritizing multiple project work streams in response to rapidly developing and changing portfolios.
• Broad knowledge of computer, networking and IT security systems including operating systems, databases, firewalls, SIEM, DLP etc.
• Good presentation, documentation and reporting skills

Preferred:

• Experience in project management
• Experience in providing assurance for cybersecurity technologies, policies, standards and procedures
• Ability to maintain a working knowledge of cybersecurity principles and elements
• Understand global IT risk management structure
• Demonstrable experience of senior stakeholder management and relevant management reporting.

Education / Qualifications:

Essential

• Degree educated and / or equivalent experience.

Preferred:

• Relevant certifications (e.g. CISA, CRISC, CISM, CISSP….)

If the above is of interest please apply to this role or call me on 0207 509 8040 to find out more. Alternatively, you can email me your CV to darius.goodarzi@robertwalters.com

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates