Lead Service Owner Security / Security Architect

London

Full Time

Interval

Not Disclosed

Skills

CCTV • Customer Service • Communication skills • Computer Skills • ICD Coding • Military Experience • Law Enforcement • NIST Standards • Security • DoD Experience • RMF • Writing Skills

The Role

We are looking for a Lead Service Owner Security / Security Architect to join the IT infrastructure team at one of our Big 4 clients most important customers.

The successful candidate would integrate into the consultancys team and work directly with the end client, providing security architecture expertise and acting as the Lead Service Owner for IT Security.

Type of job:Contract / freelance

Working hours:Full-time (40 hours / week)

Duration:ASAP - Apr 2023 with high likelihood of repeated extensions

This is a remote position.

Key activities:

Drive the design and creation of new security services but also improve already existing ones
Create security roadmap and target security pictures for the whole organisation
Evaluate the current security state of the organisation and advise on improvements
Develop security guidelines, security best practices
Consult service design teams on security topics
Collaborate with other security teams (e.g. CISO office, SOC, network security, OT security)
Support and consult project teams with security expertise (security assessment, threat mitigation)
Be a security advisor with broad knowledge across many IT security areas
Lead a team of security experts
Work closely with different stakeholders to build and establish security culture across global IT and OT teams

Dont miss this fantastic opportunity to join a vibrant team at a big client with huge potential for long-term work!

Requirements

All candidates must be resident in and have unrestricted rights to work in the EU or UK
Fluent in English
9+ years of proven project experience within security roles including hands-on experience
Service design experience for designing and creating of new services
Managing projects of security experts
Broad knowledge across defensive and offensive security areas
Practical technical experience and deep understanding within at least 2-3 of the following areas: Security Monitoring, Infrastructure Security, Cloud Security, IAM/PAM, Application Security, Endpoint Security, Vulnerability Management, Incident Response, Email Security, Penetration Testing, Security Architecture, Threat Intelligence, Threat Modelling, DevSecOps
Knowledge of various attack vectors and intrusion methodologies and prevention measures: phishing, malware, brute force, APT, buffer overflow, etc.
Extensive knowledge of security frameworks and security standards such as: ISO27001, NIST CSF, MITRE AT&CK, SANS, CIS, etc.
Experience with creating of (security) architectures (HLD/LLD) and presenting to the management
Hands-on cloud (Azure preferred) knowledge especially of security services and security measures. Knowledge of cloud security best practices
Experience with security best practices and principles such as: Security-by-Design, Zero Trust
Technical certifications: cloud security (Azure preferred), Security+, SANS, OSCP, PNPT
Non-technical certifications: CEH, CISSP, CISM, ITIL, etc.
Further security certifications are plus
Good communication and documentation skills (standards and guidance)
Ability to work under pressure
Strong team player

Ideal (but not essential)

Deutschkenntnisse
Multilingual
Experience working with industrial / manufacturing clients

Comments

Welcome to wanttojob comments! Please keep conversations courteous and on-topic. To fosterproductive and respectful conversations, you may see comments from our Community Managers.