Cloud Security Architecture Consultant

Role Purpose

To support the design, development, procurement and assurance of information system solutions to ensure confidentiality, integrity and availability. This includes provision of expert advice on the selection, design, justification, implementation and operation of relevant security controls as well as advising on the security processes through the project lifecycle.

Security Architecture Consultants are key to BAE Systems AI security architecture capability and possess industry-leading subject matter expertise.

Core Duties/Key Accountabilities

Accountabilities

To drive beneficial security change into the business through the development or review of architectures. In particular:

• To understand the business and information risk context, and propose architectures and countermeasures to mitigate risks from solutions
• To work closely with information risk advisors, accreditors, solution architects and system engineers to enable secure definition, delivery and configuration of ICT systems
• To provide strategic direction to investment in new technologies and in the delivery of secure services and solutions
• To provide thought leadership, support business development activities, perform deliver oversight and manage senior client engagements

Grade/Level Specific Accountabilities

• Security architecture contributor for secure systems integration projects
• Analyses existing and proposed technical architecture for security risk
• Advises on appropriate security controls to mitigate security architecture risks
• Provides expert technical advice to support the design and development secure architectures
• Applies secure architecture principles and practices to assure technical architectures
• Assures implementation of security controls to mitigate risks

Skills and Knowledge Required

Professional Skills:

• Ability to articulate and pitch security advice, often at a technical level, directly to key customer stakeholders
• Excellent interpersonal skills as well as both written and verbal communication and presentation skills
• Ability to prioritise workload, work well under pressure and concurrently manage both customer and BAE Systems expectations
• CISA, CISSP, CISM, or CIA would be highly desirable
• Experience working within Financial Services, ideally banking or insurance
• Experience with Microsoft Office 365 products (e.g. OneDrive, Team, Exchange Online, etc.), Microsoft Azure, and related cloud security controls
• Experience creating cloud security standards and similar document to define organisations security control requirements for a cloud environment
• Ability to verify compliance of organisation’s existing controls against standard requirements, and work with IT subject-matter experts to drive a remediation plan

Knowledge:

• Strong knowledge of Enterprise Cyber Security Architecture policies, standards principles, controls and frameworks
• Hands-on experience of architecting secure cloud solutions (AWS/Azure) as well as hybrid models
• Technical experience in IDAM technologies and architectural frameworks
• Micro-services architectures and RESTful APIs
• Network security architecture principles such as network zoning and segmentation would be beneficial

The ability to obtain security clearance (SC) is highly desirable but is not essential.

#regular
#hiring
#AIcareers

Tagged as: Science & Engineering