Key Responsibilities
- Lead the design and implementation of secure architectures for large, complex programmes, ensuring compliance with organisational and regulatory requirements.
- Deliver cyber assurance through risk assessments, threat modelling, security architecture reviews, and security governance across on-premises and cloud environments.
- Provide expert guidance on secure software development, network security, AI, Unified Communications, hardware security, and cloud transformation.
- Lead security for AWS and Azure migrations, embedding security throughout programme delivery and advising on remediation and risk mitigation.
- Develop and maintain security standards, policies, and controls across SaaS, PaaS, IaaS, ERP, Digital, Content Management, GIS, and Middleware platforms.
- Provide strategic security architecture input, supporting enterprise governance, transformation initiatives, and long-term security planning.
- Mentor technical teams and stakeholders, promoting security best practice and continuous professional development.
- Deliver cyber forensic investigations for complex, multi-party incidents, ensuring legal-grade evidence handling and chain of custody.
- Support nation-state and Advanced Persistent Threat (APT) intelligence through threat monitoring, proactive hunting, and executive briefings.
Experience & Skills
- Proven Security Architect with extensive experience delivering large, technically complex programmes involving multiple third- and fourth-party suppliers.
- Over 15 years’ experience across different sectors and varied IT and cybersecurity programmes.
- Strong knowledge in secure development, networking, AI, Unified Communications, hardware security, and enterprise cloud transformation.
- Extensive experience securing AWS and Azure environments.
- Advanced skills in architecture, strategic planning, governance, and technical leadership across complex estates comprising SaaS, IaaS, ERP, Digital, Content Management, GIS, Middleware, and legacy platforms.
- Experience leading independent Red Team and Purple Team engagements, including adversary emulation, MITRE ATT&CK-aligned testing, and regulator-grade assurance.
- Expertise in exploit research, custom exploit development, zero-day vulnerability analysis, and hardware/firmware security testing.
- Experience conducting cybersecurity assessments for ICS, OT, SCADA, IoT, and other safety-critical environments is beneficial.
- Proven capability delivering NIS2 readiness assessments, independent audits, and regulatory assurance reviews.
- Expertise in supply chain and fourth-party cyber risk investigations, including dependency mapping and forensic compromise analysis.
- Strong experience in complex cyber forensics, supplier investigations, and litigation-ready evidence collection.
- Knowledge of nation-state threat intelligence, APT monitoring, counter-intelligence, and proactive threat hunting.
