Lead Cyber Security Architect

About our client

A well-established organisation with a significant operational technology and industrial systems footprint investing in the maturity of its enterprise security capability. This is a senior hands-on security architecture role within the central security function focused on both corporate IT and industrial operational technology environments.

Responsibilities

• Act as the recognised authority on securing operational technology running architecture reviews of proposed operational technology solutions against relevant standards regulatory expectations and internal security requirements.
• Provide hands-on technical direction across IT and operational technology security spanning system hardening and secure design for both hardware- and software-oriented initiatives.
• Own the definition of security baseline requirements revisiting and updating them as new platforms and infrastructure come into scope.
• Guide implementation of secure architectures end to end including the hardening and configuration of security controls.
• Contribute to shaping and maintaining internal security policies standards and guidance.
• Embed architectural assurance into the business case review cycle checking designs for a sound posture across both network and infrastructure layers.
• Run technology evaluations with mixed internal and external teams to select fit-for-purpose security tooling.
• Steer and track delivery of security initiatives across the function.
• Support the security operations team with specialist input during IT and operational technology incidents.
• Mentor and upskill fellow architects and wider security colleagues across IT and operational technology security topics.
• Manage vendors across project delivery and ongoing technical support.

Requirements

• Degree-level education or equivalent.
• Substantial background in operational technology and its cyber security underpinned by strong experience in security infrastructure design and delivery.
• Proven track record designing security architectures across IT operational technology and converged IT/operational technology environments.
• CISSP certification.
• A recognised security architecture credential (such as SABSA or comparable).
• An industrial/operational-technology-focused security certification (for example GICSP or similar).
• Hands-on experience assessing security weaknesses and building mitigation approaches for networked systems.
• Working knowledge of established security frameworks (e.g. NIST ISO).
• Experience supporting and driving cyber risk management activities.
• Capability in eliciting and engineering security architecture requirements.
• Strong vendor management experience with an emphasis on outcome-based arrangements.
• Confident leader and influencer across internal and external stakeholders.
• Able to translate complex security concepts for non-technical audiences.
• Self-directed and dependable comfortable working under pressure with limited oversight.
• Strong written and spoken command of English and Chinese.