1 Security Architect

Tender description

Who Speclialist Work With The successful candidate will work with Technical Architects, Solutions Architects, Information Security and Risk advisor. The candidate will report to the Head of ICT. What Specialists Work On •Evaluate options for hosting Census data collection and processing environments, provide advice on solution architectures from a security and information-assurance perspective •Propose security design principles for Census programme •Identify/assess information risks relating to architecture solutions. •Design/assess mitigation measures to manage risks to architecture solutions •Provide security advice/guidance relating to architecture solutions •Liaise with suppliers on solutions ensuring risks are managed, gathering/evaluating evidence of compliance with security requirements •Advice on assurance, verification tools/techniques ensuring that supplier solutions meet security/information assurance requirements throughout contracts •Ensure internal/external solutions are configured to meet agreed security architectures •Create security documentation in accordance to agreed standards Where the Work Takes Place Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Early Market Engagement Working Arrangements Full time however 4 days a week can be negotiated. We need the employee to work with the team face to face in order to help with knowledge sharing. Work Location Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Security Clearance It is essential the candidate possesses SC Clearance. Additional T&Cs Skills & Experience Knowledge and understanding of the internal/external information security risks to digital information Knowledge and understanding of information security standards with experience interpreting and applying information assurance legislation/policies Experience/track-record of providing information security advice to corporate programmes and projects Knowledge of digital architectures and digital solutions and understanding of the risks represented by solutions, with experience of managing security in an environment with frequent change Experience in the design and implementation of security architecture solutions Experience in the verification and audit of architecture solutions Experience of evaluating security compliance of supplier solutions Experience of providing security advice and guidance relating to cloud based solutions Nice to Haves Knowledge of the application of security in an Agile environment Knowledge and understanding of government information security standards and ISO27000 series Experience of system operations for security network, application, monitoring, incident response and cloud services Technical knowledge of security engineering, authentication, protocols, cryptography and application security Certifications for CEH (Certified Ethical Hacking), CISSP (Certified Information Systems Security Professional), SANS GIAC (Global Information Assurance Certification) or CREST Experience of security implications of configuration management processes and tools Knowledge of a range of security verification services and their application – see SIRA role Knowledge of information risk management methodologies - see SIRA role No. of Specialists to Evaluate 5 Cultural Fit Criteria Work as a team with our organisation and other suppliers Share knowledge and experience with other team members Can work with clients with low technical expertise Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range