Lead Cyber Security Architect

Our world-leading Time & Frequency department seeks a Cyber Security Architect.

This is an exceptional opportunity to join the global authority in precision timing at a defining moment for UK digital infrastructure.

Backed by a government investment of £180 million in the National Timing Centre (NTC) programme, we’re developing a world-first resilient time distribution capability, providing industry with a robust complement to satellite systems such as GPS (which can be vulnerable to disruption from solar storms, jamming and spoofing).

This capability will support essential services including:

• Telecommunications
• Online banking
• Emergency response,
• Transport networks, and more.

Key Responsibilities

• Lead the Cyber Security Architecture and Design of systems and services, at organisational and inter-organisational level.
• Define and evolve enterprise security architecture, principles, strategies and roadmaps, aligned with security strategy and risk appetite.
• Translate threat and risk requirements (business, security, current and emerging) into practical security architectures, controls and mitigations.
  
• Oversee the design and delivery of cyber operational capabilities, ensuring security architectures translate effectively into secure, resilient operational services.
• Lead security architecture and design reviews, identifying risks and ensuring appropriate security controls are incorporated.
• Provide independent security risk and architecture consultancy, influencing customers and senior stakeholders across UK Government and the private sector.

You’re already operating as a Cyber Security Architect or Senior Cyber Consultant, combining technical expertise with the ability to influence senior stakeholders.

Essential

• Significant experience delivering security architecture across complex technology environments.
•  Translating business, security, risk and threat requirements into security architectures, principles, strategies, roadmaps, controls and mitigations.
•  Strong understanding of enterprise IT environments and associated business processes.
•  Security design across multiple domains, including networks, infrastructure, virtualisation and cloud.
•  Technical assurance, reviewing designs, systems, cloud services and controls against security policies, standards and regulatory requirements.
•  Providing independent security consultancy and challenge, influencing customers and senior stakeholders on security risk and decision-making.

Desirable

• Experience within government, defence, regulated or security-sensitive environments.
• Professional qualifications such as CISSP, SABSA, CISM or CCSP (with additional certifications across cloud security, architecture, networking and/or assurance)
• Experience evaluating and adopting emerging technologies and methodologies.

We actively recruit citizens of all backgrounds, but the nature of our work in specific departments means that nationality, residency and security requirements can be more tightly defined than others. You will be asked about this throughout the recruitment process. To work at NPL, you will need to obtain BPSS security clearance. 

However, to work in this role in the Time & Frequency department, you will need to have an SC clearance with no restrictions, or you must have the ability to obtain an SC clearance.

Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.