Security Architect

###

On behalf of DBT , we are looking for a Security Architect (Inside IR35) for a 12 Months contract based Hybrid/ in DBT Hubs .

As a Security Architect , your main responsibilities will be:

- Threat Assessments and Security Architecture reviews on incoming services from the BIST MoG. This will include following the BIST Threat Model Strategy and templates, gathering documentation on services and creating accurate understanding of Cyber Impact these services will bring to BIST. The benefit of this work will provide BIST a greater understanding of the services and the risk they are carrying providing key knowledge to the Assurance teams on what to prioritise.
- Communicating with non MoG teams primarily platform teams for destination platforms of the services. This will be to ensure the right technologies are in place to ensure the service works effectively but it also in scope to be monitored by BIST SIEM solution (MS Sentinel).
- Evidence and Documentation Gathering that relates to Secure by Design, business continuity plans, incident management plans and Business Impact Assessments. Where applicable working with the incoming teams on creating these documents before migration.
- Work with risk, delivery, data and business analysis colleagues to align assurance and governance processes, ensuring proposals are consistent with departmental, assurances, standards, NCSC Secure by Design principles , Technology Code of Practice requirements and programme approval gates. Deliverables: Assurance Plan, Architecture Governance Framework, Risk and Issue Register, Technical Assurance Papers, ARB/TDA Approval Submissions.

PLEASE NOTE: SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.

Essential:

- Threat Modelling & Security Architecture Review experience conducting cyber risk assessments and evaluating the security impact of new services and platforms.
- Security Assurance & Risk Management expertise in identifying, assessing and communicating security risks, threats and mitigation strategies.
- Microsoft Security Technologies & SIEM Integration knowledge of Microsoft Sentinel, security monitoring, logging and onboarding services into enterprise security platforms.
- Secure by Design & Security Governance experience applying NCSC Secure by Design principles , Technology Code of Practice and security assurance frameworks.
- Security Documentation & Compliance capability to develop and review Business Impact Assessments, Business Continuity Plans, Incident Management Plans and security evidence packs.
- Stakeholder Engagement & Technical Collaboration skills to work effectively with platform, delivery, data and business teams to ensure secure, compliant and operationally resilient solutions.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a Disability Confident employer, DBT encourage applications from disabled and neurodivergent candidates . Applications from candidates who identify as having a disability and meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.

Armed Forces Covenant

As a signatory of the Armed Forces Covenant, DBT welcome applications from veterans, service leavers, reservists and military spouses or partners. Applications from eligible candidates who meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".