Security Architecture Lead

As the Security Architecture Lead, you will provide strategic security architecture leadership and oversight for significant technology and business initiatives, including cloud services, payments, third-party solutions, APIs, data protection and the adoption of emerging technologies, ensuring that cyber security risks and architectural requirements are identified, assessed and appropriately addressed throughout the design and implementation lifecycle.

This is a permanent, hybrid role, based in our Swindon office, with the requirement to be in the office 3 days a week.

The Benefits

• Salary - up to £90,000
• Bonus scheme - on target bonus - 15%
• Pension scheme - contribute up to 5% of your salary and Openwork will match you and put in an extra 5%
• Critical illness cover
• Income protection
• Death in service - 4x salary
• 27 days holiday + bank holidays, with the opportunity to buy up to an additional 10 days
• A range of other flexible benefits to include private medical insurance, dental insurance and much more.

Key Accountabilities

• Lead security solution architecture for Openwork projects, including cyber security risk assessments, the identification and implementation of controls, review of supplier-proposed solutions and engagement with RFI and RFP exercises.
• Collaborate with other cyber security functions involved with change management, specifically Assurance & Compliance, Security Engineering, and the Security Operations Centre
• Review queries and escalations regarding security policies, compliance, and risks and validate changes to cyber security policies and standards from a technical perspective.
• Own and direct the development of Openwork’s Enterprise Security Architecture, defining the target direction and ensuring its application across technology and change portfolios.
• Determine and influence technology and solution lifecycle decisions from strategy and design through implementation, operation, renewal and retirement, ensuring cyber security risks, controls and architectural implications are addressed at the appropriate stage.
• Assess and determine the enterprise-wide implications of architecture decisions affecting all users, major services, cyber risk exposure and significant third-party, cloud and cyber security solutions, ensuring outcomes are secure, usable, proportionate and consistently applied across Openwork.
• Define, mandate, maintain and uphold security architecture principles, standards and patterns with enterprise-wide impact; approve, reject, conditionally approve or escalate material architecture decisions and exceptions; and drive consistent adoption across technology teams, change initiatives and third-party solutions.

What will you need to succeed?

• Strong cyber security and solution architecture expertise, covering risk management, enterprise change, cloud and third-party services, with the judgement to assess and address complex or novel risks associated with AI and emerging technologies.
• Strong knowledge of identity and access security, including authentication and authorisation protocols, Identity and Access Management (IAM), Privileged Access Management (PAM), API gateways and API security.
• Strong working knowledge of application security, including secure application design, threat modelling methodologies such as STRIDE, Web Application Firewalls (WAF), and security testing tools including Veracode and Fortify.
• Strong understanding of secure software development practices, including the Microsoft Software Development Lifecycle and the integration of security controls throughout the development lifecycle.
• Strong knowledge of infrastructure and network security, with the ability to assess architectures, identify security risks and recommend proportionate controls.
• Strong understanding of data security, including the principles and controls required to appropriately protect sensitive and business-critical information.
• Excellent influencing and stakeholder management skills, with the ability to constructively challenge, persuade and build credibility across a complex organisation.
• Strong business partnering capability, with experience working as a trusted adviser to internal and external stakeholders and translating technical cyber security risks into clear business implications.

Why Us?

At The Openwork Partnership, we're a dynamic, fast paced, and growing business with huge ambition. This is all made possible by the brilliant people who are part of The Openwork Partnership family. We're investing heavily in our colleagues, continuously striving to give them the platform to develop personally and professionally and reach their full potential. We’re also very proud of our culture, as one of the Best 100 Large Companies to work for in 2022. The Openwork Partnership values, and respects individuality and we are committed to building an inclusive culture and environment which truly recognises and celebrates our colleague’s individual differences and identities – just like our financial advice, for us, it’s personal. We believe everyone can make a difference and your race, religion, disability, and gender will never be a barrier. At Openwork, we have a strong ethic of care for each other where you can balance a successful career with your commitments and interests outside of work. We believe that you will bring your best self to work if you are trusted to choose when, where and how you do it.