Enterprise Security Architect

Description

Enterprise Security Architects perform a crucial role in ensuring the secure and effective delivery of products and services across the business and improving the overall security position of William Hill. 

You’ll be exposed to a busy change environment with unique challenges every day acting as a security technical design authority, providing consultancy, direction and advice for projects and business units. Using proven experience from Information Security roles you’ll be providing guidance and ensuring compliance with statutory and industry security regulations and best practice.

The role has a particular focus on supporting the assessment of security risks and threats to systems, the development of appropriate security requirements and controls in compliance with relevant regulatory requirements, and collaboration with architects and engineers in the delivery of the products and services. This will require a solid information security foundation of knowledge across a number of areas and architectural experience in systems design and integration. 

 

What you'll be doing:

Technical Delivery

• Development of security requirements sets, blueprints and patterns based on new technologies across the organisation
• Managing workloads and product delivery using Agile methods including working with Initiatives, Epics, User Stories and Tasks
• Working collaboratively with other Enterprise Security Architects to propose and develop technical solutions to meet Product Owner demand and to break this work down into value slices for prioritisation

Security Architect

• Assessing new technology options across the organisation to develop proof of concept and proof of value implementations
• Work closely with architects and engineers to assess the security needs and requirements of solutions and technical services
• Collaboration with architects, Product Owners and Heads of Product to assess and approve security requirements and controls across multiple technology domains
• Develop architectural models and artefacts using modelling software through collaborative sessions and working within custom meta-models

Technologies

• AWS - including best practice architecture and key services
• Sparx Enterprise Architect, Archi or similar modelling tools
• JIRA, Slack, Confluence
• GitLab

Requirements

What we're looking for:

• Experience of Enterprise Security Architecture and hands-on technical information security experience
• Experience of designing and implementing security solutions
• Usage of modelling tools such as SparxEA and Archi
• Understanding of technical security architectural principles and technologies.
• A sound understanding of how to model threats & risks as well as the controls necessary to reduce or mitigate them using both process and technology.
• An understanding of how business strategy, risk, regulation and technical constraints influence organisational responses to cyber security.
• Excellent stakeholder engagement skills. Communicate and promote Information Security at all levels (both technical and non-technical stakeholders).
• Experience of both agile and waterfall focused environments.
• Experience of building strong security governance into guard rails.
• An understanding of security methodologies, best practice, and industry standards.
• Experience in risk & regulatory frameworks and standards such as NIST 800, ISO 27001, ISF SOGP, PCI-DSS, EUGDPR.
• Ideally has Security Certifications, SABSA, CISSP, CISM, GIAC, CEH.

What we offer:

Our roles offer more than just a job, you’ll become part of the evoke family! We have created an environment where our people can thrive. Check out some of the fantastic benefits on offer:

• Financial: Competitive salary
• Hybrid working: Our employees can work from home up to 80% of the time with 20% of office time built in to ensure we get some face-to-face collaborative team time - and the chance for a coffee and a catch-up!
• Holiday entitlement: You’ll be entitled to 22 annual leave days, plus bank holidays and an extra day for your birthday.
• eLearning
• Family Support: Industry-leading maternity and paternity leave and paid time off if you have caring responsibilities.
• Health & wellbeing: Tools and services to help support your well-being, including support with mental health and financial education. You will also have access to gym discounts and our cycle to work scheme.
• Healthcare: We priori