Senior Security Architect

£46701

Network Rail, Milton Keynes

Part time
Permanent
Onsite working

Posted 3 days ago, 9 Oct | Get your application in today.

Closing date: Closing date not specified

job Ref: a0b31f8d5de74a66b47fc9b1f374a924

Full Job Description

The Telecoms section of Network Rail connects many of the Operational Technology components of the railway, including signalling and electrification assets, this role is focused on the security of the networks and many of the systems that use those network(s). Being able to identify and assess security risks, from a business and technological view point, is a key aspect of the role, this requires not just a deep understanding of the technologies and their vulnerabilities, but also how these technologies could be compromised by a threat actor. A broad knowledge base of computing, networking, OT/ICS, railways and electrical distribution will be used daily in areas of risk management/identification, conflict resolution, solution proposals, safety impact and design reviews. You will be expected to communicate security related information to, and gain information from, asset owners who have little knowledge of security, and influence projects to deliver secure assets and systems from a number of suppliers and internal teams. Main Responsibilities

To act as the senior solutions architect for the telecoms security domain. Responsible for the design and documentation of security architectures within Telecoms Operations and for providing input and advice for related NR projects when required. This role will also manage the security architects within the security team.
Management of the Telecoms Operations security architect team ensuring work packages, tasks, actions and deliverables are, managed, identified and deadlines met.
Provide technical security design input for all Telecoms Operations projects. This will include high level and detailed level security designs.
Review security architecture (legacy, current and planned) in line with the audit and review program to identify security weaknesses, opportunities and controls effectiveness.
Support the security policy and compliance teams in identifying, developing, reviewing and maintaining security policy, standards and procedures aligned to both Telecoms Operations and NR.
Work with the Telecoms Operations security accreditation and compliance teams to implement the correct security controls (logical and physical), and their alignment to the compliance audit plan.
Provide key input in to the risk management process on identification of threats, vulnerabilities and appropriate controls, including detailed threat modelling.
Review security audit findings and aid in the development and execution of remediation plans. This will include interfacing with 3rd party vendors, and providing guidance (to other departments) on security best practices.
Identify opportunities for future security technologies that will aid in the delivery of Telecoms Operations products and services.
Build strong working partnerships across the Company and leverage these relationships whereby all security related processes are aligned.

Track record at managing information security teams in a highly diverse company.
Be able to demonstrate a keen understanding of security as a business enabler.
Subject matter expert in networking technologies having had extensive experience as a security technical architect aligned to IP/MPLS technologies.
Experience with configuring and managing network devices such as routers, switches, firewalls, IPS/IDS, AAA services and malware detection as well as a strong understanding of security requirements around CCTV, Wifi and access control systems.
Strong IT background and experience in managing IT related projects.
Ability to drive change and improvement aligned to Telecoms Operations strategy.
A strong influencer; confident, persuasive, determined.
Must have excellent verbal, written, and presentation communication skills, strong interpersonal skills and the ability to work effectively across project teams in a diverse environment.
You must be prepared to work in a complex, diverse, multicultural team.
Ability to work to tight deadlines and to prioritise under pressure.
Use of modelling tools to produce process flow diagrams and architecture model diagrams (including data and protocol flow mapping)
Good understanding of capacity planning and change control processes.
Industry standard qualifications and good exposure to compliance frameworks including implementation and auditing techniques.
Experience of threat modelling and mapping to risk processes.

We're dedicated to building a diverse and inclusive organisation that reflects the passengers we serve. To achieve this, we're committed to becoming an open, diverse, and inclusive workplace, leveraging the skills and expertise of our talented workforce. Together, we strive to create a safe and accessible railway for everyone. Discover more about the importance of Diversity and Inclusion at Network Rail by clicking here.