Senior Security Architect in London

Rackspace Technology is a leading end-to-end, hybrid cloud and AI solutions company. We can design, build, and operate our customers' cloud environments across all major technology platforms, irrespective of technology stack or deployment model. We partner with our customers at every stage of their cloud journey, enabling them to modernize applications, build new products, and adopt innovative technologies.

We are seeking an experienced Senior Security Architect with expertise in designing the security standards, policies, controls, and strategies required to build and operate private cloud environments to NCSC and NHS England Security Frameworks. You will conduct Risk Assessment and reviews of Rackspace and Customer environments and propose transformative recommendations and solutions to meet NCSC Security Frameworks. The role also involves defining specifications for new products, services, and service offerings, while evaluating and challenging third-party security solutions to ensure compatibility, integration, and alignment with the broader enterprise architecture. Success in this position requires the ability to drive cohesive, end-to-end security designs across interconnected technologies and platforms.

Location: Hybrid (Central London)

Key Responsibilities

• Leads in requirements gathering, threat modelling, planning, development, and implementation of data and system security controls and practices.
• Analyses risks in current environments and develops suitable strategies to address identified risks.
• Conduct gap analysis between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Develop, communicate and implement a suitable security management solution based on ISO/IEC 27001 and NIST 800-53.
• Consults on security direction, maintaining oversight over assurance of the information security management system and information systems assets.
• Cooperates with Rackspace and Customer Security Operations in regards to implementing recommended corrective actions.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide Customer guidance for Cyber Assessment Framework and DSPT toolkit.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture.
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented and maintained.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Inform Technical Support teams of appropriate security baselines for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.).
• Advise in the development of the security product strategy and roadmaps for the various internal and customer-facing security offerings.

Highly Preferred Knowledge

• Experience of security requirements facing NHS trusts or other regulated industries within the UK.
• ISO/IEC 27001 implementation and audit management.

Required Skills/Experience

• 5 years+ experience at enterprise architect level (preferably in a regulated sector).
• Enterprise Risk Management.
• Enterprise Cyber Security Architecture.
• NCSC Secure by Design Guidance.
• NCSC Cyber Assessment Framework.
• Cabinet Office Security Policy Framework.

Certifications

• ISSAP – highly preferred.
• CISSP – highly preferred.
• CRISC or equivalent – preferred.
• Industry recognised certification e.g. SC-10.

We are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic.