Job description: 

The Security Architect role will work within the Digital Delivery Hub (DDH) and work across all the products being developed and in live service. 

The successful candidate will provide security leadership across DDH programmes and products, ensuring that security is embedded by design, cyber risks are understood and managed appropriately, and that delivery outcomes align with FCA security standards and strategic objectives. 

This role will play a key part in strengthening DDH's cyber response capability, providing independent assurance of ongoing work, and defining the security roadmap and controls required to improve resilience and reduce cyber risk across the portfolio. 

What you will be doing 

1. Produce and review security architecture artefacts, threat models, security requirements and design decisions. 

2. Support and advise on cyber incident response, recovery planning and post-incident improvements. 

3. Playing a key role in the implementation of the FCA’s Information Security, Digital and Data Strategies, by ensuring DDH solutions adhere to and enable the implementation of strategies. 

4. Help define and maintain security controls that improve organisational resilience. 

5. Contribute to business continuity, disaster recovery and operational resilience initiatives. 

6. Identify emerging threats and recommend proactive measures to strengthen the security posture. 

7. Supporting and guiding project teams and the DDH product group in delivery and implementation of end-to-end cyber security. Driving and managing resolution of technical dependencies and technical do-ability issues including identifying viable alternatives and agreeing those with architecture governance. 

8. Collaborating with wider DTI product groups and enterprise architecture functions on understanding of enterprise and product architecture strategies and standards.  

9. Identifying opportunities for technology-driven innovation and shaping design proposals to take this forward; driving innovation where this delivers quick wins and business benefit and is in the boundary of the product roadmap. 

10. Engage key stakeholders in business, the DDH product group, security, and architecture function to identify capabilities, perform gap assessment, maturity assessment and document architecture to create a future.  

The skills and experience you’ll have 

Minimum 

• Experience as a Security Architect designing products, platforms, systems and components on multiple programmes and projects 

• Experience of working on the end-to-end project lifecycle, in a multi-technology environment. 

• Good communication skills, able and willing to describe and negotiate complex and detailed solutions across a variety of stakeholders. 

• Critical thinker and problem solver, able to work with imperfect information in an environment of uncertainty whilst still maintaining high standards, evidenced designs and documentation that consider regulatory, organisational and technology change requirements, the FCA divisional and enterprise strategies. 

Essential 

• Experience of designing and implementing cyber security platform solutions. 

• Experience with delivery of significant Cyber Security projects in domains, e.g. Attack Surface Management, Threat Detection and Response, Identity Access Management, Information Integrity and Protection and/or Infrastructure Security. 

• Experience working with AWS technologies. Experience of best practice security architecture across all cyber security architecture domains and key platform technologies. 

• Collaborative self-starter with positive, proactive, can-do attitude. 

• Strong experience of technical and environment interdependencies across projects and programmes.  

• Solid and evidenced knowledge foundation (e.g. CISSP, CISM, etc.) 

• Experience with formal architectural methodologies and frameworks, including TOGAF, experience in architecture modelling tools and agile methodologies. 

• Evidenced continuous professional development and engagement with industry innovators and professional bodies. 

• Experience of innovation whilst ensuring EA adherence.