Team Lead, Security Architecture Review

Role Purpose

This is an exciting role in the expanding Security Architecture team at LSEG. The Architecture team reports into the Group CISO.

This role is to join the team as a Senior Security Specialist – with a view to strengthening and building out our assurance processes as we move from a traditional on-prem operation, into the virtual, software defined and cloud paradigm.

Security Architecture Review team is responsible for reviewing the security posture of new systems alongside the Principal Security Architects; Managing firewall team and supporting Firewall rule changes in both BAU and strategic initiatives

Successful candidate will be part of Security Architecture Review team to define the role’s goals, processes and deliverable, support our strategy to Shift Left and enable the business to achieve its goals in agility and innovation.

Role Responsibilities

• Undertake security Architecture reviews and work with architecture teams to ensure security is built into active development project’s design
• Proven ability to assess and approve firewall rule changes in line with security architecture, secure design patterns and compliance standards.
• Undertake reviewing rule sets in platforms like standard, Next generation and virtualization firewalls, be able to design and operate firewall change control processes with audit traceability.
• Experience designing secure connectivity patterns that align with architectural principles, standards and policies. 
• Validate that firewall rules align with approved network segmentation models and security zoning policies.
• Drawing on technical experience and knowledge to assure that technical implementations match approved architectures
• Attend the Security Architecture Design Forum as needed
• Experience line managing a small team and leading from the front
• Operates metrics and monitoring to report the effectiveness and efficiency of the Security Architecture function.
• Analysing legacy systems to identify key architectural risks, and recommending improvements
• Work with stakeholders inside and outside the CyberSecurity function to operationalise existing cyber security processes, methodologies and best practices
• Produce Knowledge Transfer material related to the team’s processes
• Oversees reports and analysis produced by Analysts, offering guidance where necessary and ensuring adherence to applicable Information Security control frameworks and polices.
• Evangelise Security Architecture as an enabler as opposed to a blocking point

Minimum Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field is required; a Master’s degree is a plus
• Line Management experience
• Understanding of the latest security principles, techniques and protocols
• Problem solving skills, critical thinking, ability to work under pressure and self-starter
• Deep understanding of common as well as emerging vulnerabilities and how they manifest in different types of applications (web applications, thick clients, APIs, etc)
• Good understanding of Azure and AWS
• Familiarity with OWASP Top 10, SANS Top 25, NIST / CSC, CIS etc.
• Proven ability to influence; Good verbal and written communication skills, with strengths in communicating security concepts to non-security minded technical audiences
• Fast learner - Willing to expand skillset and rapidly understand new technologies
• Practical application of lessons learned into the team’s practices

Beneficial Skills. Experience and certifications

• Security industry specific technical accreditations such as GIAC, advanced degrees in Security or other certifications demonstrating core technical skills
• Previous experience in finance industry / financial markets infrastructure and / or technology sector
• Experience reviewing rule sets in platforms like standard, Next generation and virtualization firewalls
• Experience designing and operating firewall change control processes with audit traceability.
• Experience designing secure connectivity patterns that align with architectural principles, standards and policies. 
• Familiarity with cloud-native firewall services (e.g., Azure Firewall, AWS Network Firewall).
• Understanding of how firewall rules support or violate architectural principles and approved patterns (e.g., least privilege, zero trust).
• Experience using firewall management and review tools (e.g., Tufin, FireMon, AlgoSec).
• Good understanding in some of the below areas:
  • Familiarity with modern development methodologies - Agile, DevOps and SecDevOps
  • Knowledge of modern authentication systems / IAM
  • Understanding of data security / cryptography