Cyber Security Architect

T00:00:00.000Z

London

Capabilities – Full

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Our mission is to improve and safeguard public-facing services by applying digital thinking so that the future of public services is centred around citizens. We focus on delivering what is right for our clients, supporting them in the success of their projects while working collaboratively to share skill sets and solve problems.

We are not afraid of making mistakes and learn from them. Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road‑map tailored to your unique needs and improve processes such as threat management by building identity‑management programmes and establishing prevention, detection and response capabilities.

• Effective business acumen and an understanding of the cyber security challenges faced by the client, with the ability to interact with senior stakeholders across departments.
• Experience of identifying and applying security risk and familiarity with common control frameworks.
• Managing, delivering and leading cyber security and cyber risk assignments, including producing documentation, reports, recommendations and quality‑assuring the work produced by team members.
• Working as a subject‑matter expert in your particular field to support a team and managing a larger team in delivering engagements at scale, with the appropriate reach and influence across the teams and communities.
• Maintaining awareness of key business and industry trends and understanding how they impact responses to cyber risk.
• Ability to research, articulate and pitch complex and innovative architecture and security advice, at both business and technical levels, for new or existing problems and be able to justify and communicate design decisions directly to key customer stakeholders including senior management.
• Working in a particular field as subject‑matter expert, to support a team in delivering engagements at scale, which may require subtle security needs.
• Develop vision, principles and strategy for security architects for one project or technology.
• Providing clients with trusted advice, rooted in a pragmatic and agnostic understanding of their business situation and objectives, to help them navigate complex, risk‑driven cyber decisions.
• Able to understand and comprehend the impact of decisions, balancing requirements and deciding between approaches.
• Investigating major breaches of security and recommending appropriate control improvements.
• Contributing to development of information security policy, standards, procedures and guidelines.
• Be the point of escalation for architects in lower grade roles, with the ability to lead the technical design of systems and services.

• Experienced consultant with a background in Cyber Security.
• Minimum 3–5 years of experience in Information Security related positions.
• Minimum 2–3 years of experience in security architecture.
• Certification in AWS or Azure for Architecture and Security or similar.
• IASME / Cyber Essentials Plus Certified.
• Knowledge of secure network architecture and technical design.
• Experience in creating secure architecture in either AWS or Azure.
• Experience providing expert strategy, risk and technical advice, guidance and support on cyber security, both in business‑as‑usual and for live and planned projects within clients’ business.
• Broad range of cyber and information security skills, knowledge and experience such as security threats and vulnerabilities that impact or emanate from system hardware, software and other infrastructure components, and relevant strategies, controls and activities to prevent, mitigate, detect and resolve security incidents.
• Able to conduct gap analysis for specific domains, identify gaps in existing capabilities and service maturity, and identify missing cybersecurity and cyber‑resiliency capabilities aligned with changing business needs,…