Data Security Architect

Location: Bristol, Leeds, Manchester, Halifax, Edinburgh, London

Duration: 6 Months

Bank is having 2 major initiatives kicking off in the near future
• Modernising our data loss management
• Reinventing our cryptography ecosystem

Role Description
• Experience on data discovery tools, controlling the movement of data, developing governance for the application of security controls
• Understanding modern development methodologies and how to embed things like ci/cd pipelines.
• Develop an orchestration tier to manage all crypto tools (KMS, HSM, certificates, secrets, etc) and a presentation tier (CLI and API) so we can abstract the developers from any crypto assets
• Define the solution architecture of the project, translating business requirements into IT solutions - taking into account existing IT systems and complexities.
• Validate and QA of the architectural components and building blocks that will be used to construct compliant, secure and trustworthy security services.

Key Responsibilities
• Technical ownership of key CSO deliverables, Data Security Designs, HLD/LLD
• Participate in the architecture board to discuss strategy about services and their integration with existing technologies within the organisation.
• Working with architects and engineers to collaboratively define the mid and low-level security requirements into a collection of design and engineering activities to ensure that the programme is delivering against agreed security standards and principles
• Proactively identifying security risks not exclusively as part of the design/engineering process
• Owning the end-to-end security view for specific platform components, shared services or application integration items
• Performing threat modelling against architectures, engineered solutions, and as-is platforms
• Ensuring that security activities are aligned with the wider security strategy
• Working in a multi-disciplined autonomous team delivering security value on behalf the team

Key Skills
• GCP/Azure Data Security
• Design, Architecture, Engineering
• Data Security, Data Loss Prevention
• DLP tools Symantec, Hashi Corp Vault,
• Cryptography, PKI, HSM, Cloud KMS
• Cloud Certificate Management)
• Certifications such as:
• Microsoft Certified: Azure Security Engineer Associate
• Google Certified Security Engineer
• Certified Cloud Security Professional (CSSP)
• Experience working within an agile framework
• Experience working with Microsoft Azure or Google Cloud