Cyber Security Architect

Cyber Security Architect

The Security Architect works closely with the Chief Security Officer, Head of Cyber, Lead Security Architect and the wider security team to develop an IPO vision for security and evolution of the security strategy and supporting roadmaps.

The role of IPO Security Architect is part of the IPO Secure team at the Intellectual Property Office. Playing a key part in an established team, the individual is responsible for ensuring the continued compliance with key security standards, such as PCI, ISO27001, secure by design, GovAssure etc.

It is essential that this role ensures that security architecture alongside compliance are understood and therefore the role will include championing security by design.

The Security Architect is essential in shaping security solutions and controls across multiple platforms (on-premises, cloud, hybrid) providing oversight, support, and advice to enable technical teams to make security decisions.

They ensure that common tools and patterns are used effectively to deliver secure systems, whilst implementing proportionate controls to enable positive business outcomes thereby safeguarding the IPO's data, essential services and the supporting infrastructure.

They ensure Secure by Design principles are adopted, and coordinate on assurance against the National Cyber Security Centre's Cyber Assessment Framework with the Government's GovAssure framework.

Working Style

This role will be carried out in-line with IPO Hybrid working arrangements where staff are currently expected to spend at least 20%of their time working onsite from one of our offices. This role is based in our NewportOffice.

The requirement for attendance at an office location can vary by role so we would encourage candidates to discuss working arrangements with the recruiting manager to agree a reasonable balance between working from home and the office.

The IPO holds a visa sponsor licence however; this role is not eligible for sponsorship under the Skilled Worker route. Candidates will therefore need to have an existing right to work in the UK at the time of application.

Job description

Main duties consist of but are not limited to:

• Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCI DSS, GovAssure, Secure by Design)
• Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT.
• Develop and manage the security architecture roadmap, ensuring activities are organised and planned in with relevant teams in an efficient manner, ensuring it aligns closely with the IPO Secure Team's strategic direction and any recommendations from audits
• Continuously keep up to date with changing compliance legislation and initiatives to assess new opportunities for educating colleagues on relevant security standards.
• Recommend security controls and identify security solutions that support business objectives.
• Provide expert security guidance and direction during the design, implementation and use phases of systems, applications and infrastructure.
• Provide specialist advice and recommendations regarding approaches and technologies across teams and various stakeholders, assessing the risk associated with proposed changes.
• Inspire and influence others to execute security principles, communicating widely with other stakeholders.
• Assist, where necessary, with incident response processes to identify architectural issues and solutions.
• Proactively engage with internal and external partners, stakeholders and peers to develop your knowledge and inform your decisions
• You will be expected to carry out any other duties that may reasonably be required in line with your main duties.

Person specification

Essential Criteria:

Essential Technical

• Broad technical knowledge, especially around cloud and hybrid technologies, identity management and application security.
• Solid understanding of security protocols, networking, identity management, authentication, authorisation, and cryptography.
• Knowledge of secure development practices and the Software Development Lifecycle (SDLC)
• Experience of technical Security Architecture.
• Knowledge of Zero Trust principles including those from NCSC.
• Experience with adoption of Identity and Access Management principles in hybrid environments.

Essential Experience

• Solid understanding of Governance, Compliance and Risk, and the Confidentiality, Availability, and Integrity (CIA) triad.
• Excellent communication and interpersonal skills. Ability to interact with stakeholders of all levels to effectively articulate security controls, solutions, and advice. Capable of switching between technical and non-technical language.
• Knowledge and experience of using Threat Modelling techniques.
• Capable of evaluating options and making decisions quickly and effectively.
• A team player who is enthusiastic about contributing to the overall success of the team and collaborating with stakeholders of all levels.
• Sense of Urgency – ability to address situations, incidents or tasks proactively and promptly
• Continually stay abreast of emerging security technologies, threats and trends. Self-motivated to drive their learning needs.

How to Apply

Click the 'Applynow' button and complete the application form by providing the following:

Your CV

• Upload an anonymised copy of your current CV. Please remove all identifying markers such as name, title, education institution etc.
• Make sure it clearly shows how you meet the essential criteria listed in the Person Specification.

500 Word Personal Statement

Make sure to provide clear examples to show how you meet each of the following requirements:

• Solid understanding of Governance, Compliance and Risk, and the Confidentiality, Availability, and Integrity (CIA) triad.
• Solid understanding of security protocols, networking, identity management, authentication, authorisation, and cryptography.
• Capable of evaluating options and making decisions quickly and effectively.
• Continually stay abreast of emerging security technologies, threats and trends. Self-motivated to drive their learning needs.

Technical

Provide a 250-word example that demonstrates your technical skills covering the following:

• Broad technical knowledge, especially around cloud and hybrid technologies.

For further information on the sift and interview stages of this recruitment campaign, please head to our 'Things you need to know' section below.

Behaviours

We'll assess you against these behaviours during the selection process:

• Leadership
• Changing and Improving
• Making Effective Decisions

Technical skills

We'll assess you against these technical skills during the selection process:

• Provide a 250-word example that demonstrates your technical skills covering the following: Broad technical knowledge, especially around cloud and hybrid technologies

BenefitsAlongside your salary of £47,766, Intellectual Property Office contributes £13,837 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

• A flexible working scheme with excellent development opportunities
• 25 days annual leave moving to 30 days in annual increments (1 day per year) over 5 years of reckonable service. You will also get 8 days public leave and 1 day privilege leave
• Family friendly policies that support modern working families and individuals with caring responsibilities
• A variety of support functions; Staff Counselling Service, Peer to Peer Support Group
• Eligibility for special and office-wide bonus payments
• The opportunity to form part of our many inclusive network groups, find out more by looking at Intellectual Property Office (IPO)
• A range of wellbeing initiatives; Onsite Gym (Newport office), Eye Care Scheme, Volunteering Programme, Cycling facilities
• Free car parking is available on site at our Newport office
• On-site shop, restaurant and coffee shop at our Newport office

For more information about what's on offer at the Intellectual Property Office please review our IPO benefit pack attached to the bottom of this advert.

Please note that benefits may be subject to change.