Cyber Security Architect (Assurance & Risk) at NCS3

Security Architecture & Design • Interpret and translate security requirements (e.g., IM8, client policies) into architecture designs • Design, review, and enhance security architecture, controls, and solutions • Perform threat modelling and technical risk assessments • Support security design reviews and clearance processes (e.g., ACISO)Build & Implementation Assurance • Guide delivery teams on secure implementation of solutions • Validate implementation against approved architecture and security requirements • Identify and address security gaps, deviations, and non-compliances • Recommend appropriate security technologies and compensating controlsSecurity Testing & Assurance • Support and review security testing activities, including: • SSAT, VAPT, and related assessments • Validate findings, remediation plans, and retest results • Provide guidance to reduce vulnerabilities and improve security postureRisk Management & Assurance • Lead development and review of: • Deviations • Risk Registers / Risk Assessments • Assess risks based on: • Discoverability, Exploitability, Reproducibility, Likelihood, and Impact • Define preventive, detective, and corrective controls • Evaluate residual risks and support risk acceptance processes with stakeholdersData Security Considerations • Assess and advise on data-related risks, including: • Data classification and sensitivity • Data protection (data in transit / at rest) • Data access controls and governance • Ensure alignment with applicable data security frameworks and policies • Work with stakeholders to determine applicability of data security requirements within system scopeStakeholder Engagement • Act as cybersecurity SME for project teams, customers, and vendors • Lead technical discussions and provide security advisory • Support audits, reviews, and clarification requestsOperations & Continuous Improvement • Validate security operational procedures • Provide advisory to operations and SOC teams • Periodically review and enhance security architecture and controls