Primary Role & Responsibilities:
- Work closely with other IT and security teams, as well as external vendors, to ensure successful implementation and operation of security solutions.
- Architect and design security solutions that integrate seamlessly with existing systems and processes, enhancing the SOCs capabilities.
- Assess and recommend security technologies and tools that will improve the SOCs effectiveness and efficiency.
- Support and drive projects through the Enterprise Architecture design authority governance process.
- Tailor security solutions to meet the specific needs of the organization, considering unique threats and operational requirements.
- Ensure that security measures align with industry best practices, organisational security patterns and reference architectures.
- Gather and understand client needs, identifying key areas where technology can improve business processes.
- Define architectural approaches and lead proof of concept assessments.
- Coordinate across stakeholders to agree solution requirements
Identify potential security risks and develop mitigation strategies to address them proactively.
Key Skills, Experience & Knowledge:
Essential:
- Demonstrable experience in developing effective solution for cyber security services.
- Experience creating high level design document to communicate their vision.
- Experience of threat modelling, using frameworks such as STRIDE.
- Knowledge of architecture frameworks such a TOGAF, SABSA.
- Familiar with Information Security Frameworks, such as, NIST CSF, Mitre Attack, Secure Controls Framework.
- Familiar with Risk Management Frameworks, such as, NIST 800-37.
Desirable:
- Relevant certification, such as, CISSP, SABSA, CRISC, TOGAF.
- Experience working within a SOC, IRT or Vulnerability management team.
- Experience with OT or IoT technologies.
- Knowledge of IaaS fundamentals from AWS, GCP, or Azure.
- Knowledge of protecting SaaS services.
