Security Architect

Sopra Steria
The Cyber Governance Risk Management and Information Assurance Architect role supports information security for a major Defense client, leading all aspects of security across numerous projects involving significant data and payments. Working closely with the Enterprise Security Architect and collaborating with the Account Security Manager, the role ensures robust security across various project stages.

Our technological arsenal includes a robust array of innovative systems, featuring Oracle, Unix, AIX, Red Hat Enterprise Linux, Cisco, Arcsight, Splunk, Bitdefender, Tripwire, Sophos, and Microsoft solutions. These seamlessly span desktops, servers, and tailor-made applications, ensuring a comprehensive and dynamic tech ecosystem. Also, we harness the power of cloud environments from Azure, OCI, and AWS, amplifying our scalability and adaptability. To top it off, our productivity suite includes Microsoft Office tools, facilitating swift and effective document creation and data analysis.

What you’ll be doing:

• Supporting projects through their full security lifecycle, providing advice and support on Project Initiation, Risk Analysis, Security Architecture and Design, Secure Implementation, Change Control, Back Up/Disaster Recovery and Disposal.
• Act as an SME for other areas as required, such as Product Procurement, Application Design and administrative and operational procedures such as Penetration Testing or Incident Handling.
• Contribute to the design of innovative security solutions addressing the needs of our clients.
• Advising our clients on the architecture of their secure business systems.
• Deputise for the ESA in all team and wider account security matters in the absence of the ESA.
• Liaise with internal and external customers including Accreditors and third parties.

What you’ll bring:

• Domain expertise. You know and understand a broad range of information security concepts and their practical implementation to support information risk management. You have a deep understanding of IT security technologies and their integration and operation into business systems and processes.
• Project support. You have supported projects in handling their information security risks to support customer, legal and internal requirements. You have led on information risk discussions and negotiated with project leaders and other team members to make sure that they understood their risks and requirements, and have supported them to make informed decisions based on evidence.
• Architecture knowledge. You have experience of Secure by Design principals and documentation.
• Ownership and initiative. You can proactively work across the account with your colleagues and customers.
• Business analysis (security operations). You can investigate problems and opportunities in existing processes and recommend solutions. You can work with customers to identify objectives and potential benefits, and are perceived as a business enabler.
• User focus. You can identify and engage with users or customers to collate user needs evidence. You can clearly explain technical content to non-technical colleagues. You can use quantitative and qualitative data about users to turn user focus into outcomes.
• A knowledge of the following security documentation and procedural requirements; DPA/IS Pts 1/2, JSP 440, JSP 604, NIST 800 series and JSP 440 – The Defence Manual of Security.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Employment Type: Permanent

Location: Much of the work can be done remotely but occasional attendance at the office in either Glasgow or Gosport may be required.

Security Clearance Level: SC – MOD, Either hold or be eligible for

Internal Recruiter: Jen

Salary: Up to £90,000 dependant on experience

£5,400 car allowance, 25 days annual leave with the option to buy additional days, private medical, life assurance, pension, and generous flexible benefits fund

Although this role is advertised as full-time, we believe that flexibility at work can promote work/life balance, increase your motivation, reduce stress and improves performance and productivity. We support different ways of working and can offer a range of flexible working arrangements. So, if you’re interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

We embrace difference as a source of creativity, innovation and competitive advantage and are striving to become a more diverse organisation. We welcome applications from people with a diverse variety of backgrounds and identities. We are committed to equality of opportunity for all and do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation or marital status. We have partnered with Vercida , the UK’s largest diversity and inclusion focused careers site, where all our vacancies are available in an accessible format.
If you require any adjustments to the recruitment process, to enable you to perform to the best of your ability, please let us know when completing your application. We participate in the Disability Confident scheme and are committed to offering an interview to any candidate with a disability, who meets the minimum criteria for the role. If you believe this could apply to you, please let us know when completing your application.