Share this Job

Security Solutions Architect

Date:  23-Nov-2022
Company:  DWR Cymru Cyfyngedig Welsh Water Plc
City:  Cardiff
Address: 

Cardiff, Wales, GB, CF3 0LT

Job Requisition Number                              3787                                                                              
Work Type Permanent
Job Function IT
Salary Range £49,516.00 -£60,656.00 
Base South East Hub
Closing date 23:59 - 06/12/2022

 

Who we are

 

Dŵr Cymru Welsh Water keep 3 million people healthy each day with safe, reliable water, and take away wastewater to clean, before returning it safely to our beautiful rivers and seas.

 

To be able to deliver high quality, essential services which help to protect the health of our customers, colleagues and our environment, we need the right people to deliver on our vision.  This is achieved by living our core values and demonstrating the core behaviours that underpin them.  The security of our people, assets and information is key to us, so we are looking for people who understand and comply with the company’s required security objectives.

 

We know that the most successful teams are the most diverse teams. Equality, diversity and inclusion provide the very foundation to our culture at Welsh Water. We want every individual to feel confident, proud and able to bring their whole selves to work. 

 

To ensure an improved representation in our workforce, applications are particularly welcome from minority groups including Black, Asian and Minority Ethnic people, Females, LGBT+, Non-binary and people with disabilities. Together we continue to build a workplace that not only celebrates the diverse voices of our colleagues but also represents each customer we serve.

 

In essence, ours is a company based on trust, openness, respect, commitment and honesty. A company that our colleagues are proud to work for.
 

What you’ll be responsible for

 

As a member of the Security Architecture Team you will have the responsibility in supporting the creation and maintenance of the overarching security architectural road map and strategy for Welsh Water over the AMP. You will be responsible for providing strategic technology Security thinking to major cross Business programmes, planning controls to counter emerging threats, evolving technology solution thinking as appropriate. The ability to engage constructively at a senior Business sponsor level across the organisation is critical in terms of achieving a “secure by design” ethos. 

 

Key Responsibilities: 

 

  • Responsible for ensuring that Welsh Water’s Security technology and services adequately supports its business objectives
  • Supporting Welsh Water portfolio of work led by IT or other Business departments, consulting on and leading technical matters relating to mitigating Cyber Security risk and the use of any required Security technologies. 
  • Lead technical security thinking during solution design workshops employing a pragmatic solution orientated approach to mitigating business risk
  • Support defining, maintaining and evolving the multi-year Security roadmap regarding people, process and technology
  • Creation of architectural artefacts (patterns, building blocks and roadmaps) along with design documentation (options papers, business cases, HLD’s)
  • Support cloud adoption and be comfortable designing appropriate controls for shared responsibility models (SAAS/IAAS/PAAS/FAAS)
  • Support the delivery of the Programme of work for the current AMP, providing a clear view of Information Security requirements. 
  • Act as a key trusted adviser to the Business on Security technology vendor and solution decision selection to meet the Business demand.
  • Work effectively with the Enterprise Architecture team to ensure Information Security alignment with roadmaps for underlying platforms.
  • Support development of appropriate procedures, road maps and Information Security strategies to support the services provided by ITS. 
  • Support development of a strategy for future AMP periods to ensure all solutions have a clear Information Security roadmap that responds to business vision.
  • Undertake high level research, horizon scanning and analysis to identify future technology trends around Information Security and assess applicability to support Business objectives.
     

Who you’ll work with

 

Internal

 

  • CISO, CTO, Security Architecture and Design Manager, Security Operations Manager, Head of IT Architecture, Enterprise IT Architects, IT Solution Architects, OT Architecture, Programme & Project Managers, Business Analysts, Heads of function

 

External

 

  • IT & Security Outsource partners, IT & Security product vendors 

About you

 

Qualifications:

 

  • Degree educated with relevant Security professional certifications such as CISSP, CISM, TOGAF / SABSA
  • Strong knowledge of security frameworks, standards, and requirements (NIST, CIS18, ISO27001, PCI DSS, GDPR)

 

Experience

 

  • Knowledge of and experience of securing cloud environments and native cloud security controls such as Microsoft Azure.  
  • Knowledge and experience in applying and making use of industry standard enterprise security architecture concepts and frameworks. 
  • Strong technical / engineering background, able to operate at both a technical and senior Business stakeholder level.
  • Strong security architecture and solution design experience is required as is an ability to think in terms of business risk outcomes
  • Ability to think in terms of overall risk reduction and defence in depth, not simply point solutions. Creation and maintenance of both architectural, and design collateral.
  • Working knowledge and experience of cyber security within Operational Technology environments
     

Good to know

 

This will have a blended working from office, and home

Benefits

 

As well as a market competitive salary, 33 days annual leave (pro rata, including public holidays), we offer a range of employee benefits and rewards including:

 

 

  • Variable pay schemes (your salary banding will always stay the same, but depending on the performance of the company you could receive a yearly bonus)
  • Enhanced employer pension contributions – Up to 11% employer contributions
  • Enhanced family friendly policies
  • Progression opportunities, including the ability to apply for funded training and coaching and mentoring programmes
  • Reduction on gym memberships and high street shopping
  • Cycle to work scheme
  • Car-leasing scheme
  • Health CashBack scheme
  • An employee assistance programme for employees and their immediate family


Whilst also working for a not-for profit company that truly cares about earning the trust of customers everyday, and about looking after our beautiful environment.
 

INDMP

 

 

Dŵr Cymru Cyf, a limited company registered in Wales No. 2366777. Registered office: Linea, Fortran Road, St. Mellons, Cardiff CF3 0LT

© Dŵr Cymru Cyf 2019.


Job Segment: Solution Architect, Architecture, Information Security, Cyber Security, Information Technology, Technology, Engineering, Security