Asks for

The ad says“CISA, CRISC, CISM or CISSP certification a must.”
The ad says“CISA, CRISC, CISM or CISSP certification a must.”
The ad says“CISA, CRISC, CISM or CISSP certification a must.”
The ad says“CISA, CRISC, CISM or CISSP certification a must.”
The ad says“Develop and maintain secure architectural patterns and standards, with a solid working knowledge of cloud security (AWS, Azure, GCP).”
The ad says“Develop and maintain secure architectural patterns and standards, with a solid working knowledge of cloud security (AWS, Azure, GCP).”
The ad says“Apply risk-based and threat-based approaches to evaluate and recommend appropriate and proportionate security technologies and solutions (e.g., SIEM, IAM, CASB, container security).”
The ad says“Translate business, data protection and security requirements into practical and well-structured architectural designs, utilizing industry best practices and security frameworks (e.g., NIST, ISO 27001, CIS).”
The ad says“Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.”
The ad says“Develop and maintain secure architectural patterns and standards, with a solid working knowledge of cloud security (AWS, Azure, GCP).”
The ad says“Apply risk-based and threat-based approaches to evaluate and recommend appropriate and proportionate security technologies and solutions (e.g., SIEM, IAM, CASB, container security).”
The ad says“Translate business, data protection and security requirements into practical and well-structured architectural designs, utilizing industry best practices and security frameworks (e.g., NIST, ISO 27001, CIS).”
The ad says“Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.”
The ad says“Translate business, data protection and security requirements into practical and well-structured architectural designs, utilizing industry best practices and security frameworks (e.g., NIST, ISO 27001, CIS).”
The ad says“Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.”
The ad says“Using your background in Security Architecture, you will help our clients:”
The ad says“Apply risk-based and threat-based approaches to evaluate and recommend appropriate and proportionate security technologies and solutions (e.g., SIEM, IAM, CASB, container security).”
The ad says“Conduct comprehensive risk assessments and threat modelling, providing detailed analysis and actionable recommendations.”
The ad says“Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.”

The team you';ll be working with:

Security Consultant (Architect)

Hybrid Variable London or Birmingham

The Team

NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.

What you';ll be doing:

Using your background in Security Architecture, you will help our clients:

Security Architecture:

Translate business, data protection and security requirements into practical and well-structured architectural designs, utilizing industry best practices and security frameworks (e.g., NIST, ISO 27001, CIS).
Develop and maintain secure architectural patterns and standards, with a solid working knowledge of cloud security (AWS, Azure, GCP).
Apply risk-based and threat-based approaches to evaluate and recommend appropriate and proportionate security technologies and solutions (e.g., SIEM, IAM, CASB, container security).
Outline key security components, interfaces, and dependencies. Develop architectural diagrams and overviews. Document security design principles and provide rationale.
Ensure designs align with business objectives, security policies, and industry best practices, with a focus on cloud-native security considerations.

Risk and Threat Management:

Conduct comprehensive risk assessments and threat modelling, providing detailed analysis and actionable recommendations.
Advise clients on risk mitigation strategies and security best practices, and support the implementation of those strategies, contributing to measurable improvements.
Support security incident response and investigations, contributing to thorough post-incident reviews and identifying areas for improvement.

Stakeholder Engagement and Technical Leadership:

Provide expert guidance to clients on secure architecture and risk management, participating in technical discussions with stakeholders.
Engage with stakeholders to contribute to informed security decisions and communicate complex security concepts effectively.
Deliver clear presentations and reports to technical and non-technical audiences and provide technical guidance to project teams.
Collaborate with developers, IT operations, and other security team members to ensure effective security integration throughout the SDLC.

Security Policy and Standards Implementation:

Advise on the development and implementation of security policies, standards, and procedures, and support their enforcement, including cloud-specific policies.
Conduct security compliance assessments and audits, and assist in addressing any gaps, providing recommendations for remediation.
Support alignment with relevant security frameworks and regulations, identifying potential compliance issues and contributing to mitigation strategies.

Technology Evaluation, Deployment, and Management:

Conduct security architecture reviews and perform security assessments, including vulnerability scanning, configuration reviews, and cloud security posture assessments, identifying vulnerabilities and recommending detailed remediation strategies.
Contribute to the development of security architecture roadmaps and strategic plans, and support their implementation, with a focus on continuous improvement.
Evaluate and recommend appropriate security technologies and solutions and support the deployment and integration of those technologies.
Provide guidance on the implementation of security controls and best practices and support the maintenance and optimization of those controls.
Stay updated with emerging threats and technologies, and research and recommend new security solutions.

What experience you';ll bring:

It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a broad experience of security architecture and have evidence of experience in a number of the following fields of expertise:

5+ years'; varied experience in information security, data protection, and security architecture roles, with a focus on cloud security, and compliance.
Strong understanding of security governance, risk, and compliance frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.
Hands-on experience building credibility with external stakeholders through technical presentations, audits, or compliance reporting, including enterprise clients, critical system vendors, certification auditors and regulatory bodies.
Proven ability to technically guide and mentor teams, as well as influence and collaborate with senior stakeholders in a similar architecture, security, or risk management role.
A hands-on approach with the ability to balance project level strategic oversight with direct involvement in security tasks.
Excellent communication skills, with the ability to present complex information clearly and effectively to non-technical stakeholders.
The ability to explain complex topics to a diverse range of audiences.
Strong attention to detail and the ability to deliver high quality work.
Participate in pre-sales tasks and perform ongoing support of delivery collateral.
A valid right to work in the UK.
Eligible to obtain UK SC clearance.
CISA, CRISC, CISM or CISSP certification a must.

Who we are:

At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.

what we';ll offer you:

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.

You can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/

We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.

Back to search Email to a friend Apply now