Security Architect
Meritus is supporting one of our clients in the Newport area who are looking for a Security Architect.
6 MONTHS INITIALLY - ACTIVE SC REQUIRED - 4 DAYS A WEEK IN NEWPORT - £85PH INSIDE IR35
Responsibilities
Design, develop, and maintain secure system architectures for MOD platforms, applications, and networks
Ensure alignment with relevant standards and frameworks including NIST SP 800-53, ISO 27001, JSP 440, DEF STAN 05-138, and NCSC guidance
Produce and maintain security documentation including Security Architecture Documents, Security Risk Assessments and Security Management Plans
Lead and support secure design reviews and contribute to engineering assurance gates
Liaise with security stakeholders (MOD, NCSC etc.), Information Assurance teams, and other stakeholders to support security assurance processes
Collaborate with engineering and development teams to ensure security requirements are met from the outset
Keep up to date of evolving threat landscapes and propose mitigations aligned with system requirementsSkill Set
Essential
Proven experience (6+) years in cyber security architecture within a defence, aerospace, or critical infrastructure environment
Strong knowledge of MOD security requirements (e.g. JSP 440, JSP 604, DEF STANs)
Good working knowledge and experience of Secure by Design
A robust background in security architectures, process and both industry and government compliances (e.g. ISO 27001, CE/CE+)
Solid understanding of systems engineering principles and secure development lifecycles
Experience developing artefacts to support MOD security assurance
Hands-on knowledge of risk management frameworks (e.g. HMG IS1/IS2, NIST RMF)
Excellent communication skills, both written and verbal - able to present to technical and non-technical stakeholders
Currently holds SC ClearanceCertifications
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
SABSA, TOGAF or equivalent architecture certifications