Back

Security Architect Lead at Ministry of Defence, London, 3 Months, £Contract Rate

up to 6 Months Information Technology Sales

Contract Description

SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance. 

The Ministry of Defence (MOD) is a central government department with a mission to protect our country and provide the ultimate guarantee of its security and independence, as well as helping to protect its values and interests abroad.

The MOD is one of the biggest public procurement organisations in Europe and the single largest customer for UK industry. It currently manages approximately £20 billion of spend on capital investments in equipment and infrastructure every year. Over the next decade the MOD is committed to spending over £190 billion on equipment and support. The MOD’s customers include both the armed forces and national security agencies, and it has a diverse range of requirements, including military fighting vehicles, education services, nuclear submarines and facilities management.

The MOD’s aim is to provide its armed forces with the best capabilities to enable them to protect the UK’s security and advance national interests, both now and in the long term.

To do this the MOD has an annual budget of almost £53 billion and a workforce comprising 197,000 people. of which 54,000 are civilians working for the UK MOD.

The work really matters; the MOD offers a range of engaging roles which have a direct impact on the quality of services they provide, in many locations across the UK. We support teams working in HR, Primary Health Care, Corporate Services, and many others.

A Lead Security Architect is responsible for driving the secure design and development of solutions for one or more major business sectors within the department. They lead the security engagement for all projects within their portfolio ensuring that the department’s security design standards are adhered to.

As a Lead Security Architect, you will provide an ‘out-reach’ service to your business areas to advise on security requirements and solutions to enable technical teams to make security decisions, ensuring the effective use of common tools and products. 

You will collaborate with peers both within and outside of your Portfolios to identify new opportunities for exploiting emerging technologies and support the development of architectures, patterns and approaches to support their safe use in accordance with the department’s risk appetites.

 As a Lead Security Architect, your main responsibilities will be:

  • Coordinate engagement with key security assurance stakeholders, including J3, Digital Enterprise Authority Board (DEAB),  Digital Enterprise Operating Authority Cyber Compliance (DEOA CC) and other relevant assurance bodies, to support the maintenance of D2S CAtO and associated assurance obligations.
  • Maintain and update the D2S Cyber Activity and Assurance Tracker (CAAT), ensuring assurance evidence remains current in response to service change, emerging threats, control updates and changes to the operational environment.
  • Work with Security Risk Managers and service teams to ensure security risk assessments, risk treatment activity and assurance documentation remain consistent, current and aligned to the D2S risk position.
  • Support the transition of D2S security assurance documentation from JSP 604 to JSP 453 / Secure by Design, including mapping legacy artefacts to the current policy framework, identifying evidence gaps and supporting remediation activity.
  • Provide security assurance advice and guidance to D2S management, delivery and engineering teams, helping ensure Secure by Design principles, relevant JSP 453 requirements and agreed assurance controls are understood and applied.
  • Provide assurance guidance and governance for application teams progressing through the D2S path-to-production process, ensuring proposed deliveries remain within the scope of D2S CAtO and are aligned with JSP 453, Secure by Design and applicable D2S security requirements.
  • Support preparation for assurance reviews, audits and governance forums, ensuring relevant evidence, actions, risks, decisions and dependencies are recorded, tracked and available for review.

Essential:

  • Deep cyber security experience in at least two security domains                   
  • Design and publication of enterprise or solution architecture patterns and templates
  • Driving and managing security implications of transformation          
  • Communicating technical security matters to key stakeholders in a non-technical way
Contract Spy
About Contract Spy

Discovering Direct IT Contract Opportunities for Contract Spy members.

    Join Now

Apply Now