Cyber Security Architect in London

The Security Architect will provide technical expertise to HM Government (HMG) departments in the secure design, implementation, and optimisation of Microsoft Security solutions. This role requires knowledge of Microsoft Security domains, including Sentinel, Defender, Purview, and Entra ID.

Responsibilities:

• Advise on best practices for the design and implementation of Microsoft Security solutions.
• Assist HMG departments in maximising their Microsoft Security investments by reviewing proposed solution designs and existing deployments to identify and recommend improvements.
• Act as a Subject Matter Expert (SME) for the Microsoft Security stack, offering technical guidance to client organisations on adopting and managing Microsoft Security solutions.
• Deliver outcomes against one of our service lines in support of the Government Cyber Security Strategy.
• The development, implementation, delivery, and continuous improvement of Cyber GSeC advice and guidance services across circa 400 government organisations.
• Select suitable security techniques, tools, and test strategies to confirm compliance with relevant HMG security standards, providing suggested remediation actions.
• Lead the development of Security Principles, Policies and Technical Standards aligned to business context and risk appetites and curate communication campaigns for a wide range of stakeholders.
• Support balanced and efficient cyber security risk management decisions, identifying vulnerabilities and resolutions in sophisticated technical environments.
• Recognise when security measures impact users or business needs, providing targeted and expert advice to inform business decision making, and handle partner concerns.
• Identify, raise, and advance cyber risks in keeping with HMG risk appetite and deliver effective cyber services from our catalogue, supporting Secure by Design and the security lifecycle.
• Research, identify, validate, and lead the adoption of new technologies and methodologies, engaging with and contributing to a wider security technology and tooling strategy.

Skills:

• Microsoft Purview, including Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, and Insider Risk Management.
• Entra ID, including Conditional Access, Identity Protection, and Privileged Identity Governance.

Preferred Certifications:

• SC-400/401
• SC-100
• SC-200
• SC-300

The Role:

As a Cyber Security Professional/Security Architect leading service delivery within Cyber GSeC, you will play a key role in improving the cyber security posture of His Majesty’s Government. Championing the outcomes of the Government Cyber Security Strategy you will oversee the design, implementation, uptake, and continuous improvement of Cyber Security best practice and Cyber GSeC services that provide tangible improvement to the cyber security of Lead Government Departments and their underlying Authorized Lead Bodies (ALBs). You may also be required to contribute to other outcomes of HMRC’s Cyber Security Technical Services function.

At application and interview you must demonstrate intensive experience of:

• Minimum 3-5 years’ experience working as a Cyber Security Professional or Security Architect.
• Demonstrated senior stakeholder management across partner organisations, clients, and suppliers.
• Understanding of security and privacy risks and associated threats, including confidentiality, integrity, availability, non-repudiation, and privacy.
• Successful delivery of security aspects of major projects, demonstrating professional credibility.
• Crafting and conveying information security and risk management guidance aligned to corporate risk appetite across several enterprises.
• Experience with leading standards such as NIST, ISO, CIS, and Cyber Essentials.
• Intensive consulting on security assurance and conducting audits.

Please ensure your CV clearly demonstrates how you meet this essential criteria.

Desirable Qualifications:

It is desirable that candidates hold some relevant qualifications:

• NCSC Certified Cyber Professional (CCP)
• Certified Information System Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)

Please note that SC Clearance is required for this position.

Seniority level: Mid-Senior level

Employment type: Contract

Job function: Information Technology, Government Administration